V6100 and V7122 User Guide 343Setting Up a RADIUS ServerThe following examples see FreeRADIUS, a free RADIUS server that can be downloadedfrom www.freeradius.org. Follow the directions on that site for information on installing andconfiguring the server. If you use a RADIUS server from a different vendor, see itsappropriate documentation.To set up a RADIUS server follow the next 5 steps:1 Define the gateway as an authorized client of the RADIUS server, with a predefined‘shared secret’ (a password used to secure communication) and a vendor ID. Figure 121displays an example of the file clients.conf (FreeRADIUS client configuration).Figure 121 Example of the File clients.conf (FreeRADIUS Client Configuration)## clients.conf - client configuration directives#client 10.31.4.47 {secret = FutureRADIUSshortname = tp1610_master_tpm}2 If access levels are required, set up a VSA dictionary for the RADIUS server and selectan attribute ID that represents each user's access level. The following example shows adictionary file for FreeRADIUS that defines the attribute ‘ACL-Auth-Level’ with ID=35.Figure 122 Example of a Dictionary File for FreeRADIUS (FreeRADIUS Client Configuration)## 3Com VSA dictionary#VENDOR 3Com 5003ATTRIBUTE ACL-Auth-Level 35 integer 3ComVALUE ACL-Auth-Level ACL-Auth-UserLevel 50VALUE ACL-Auth-Level ACL-Auth-AdminLevel 100VALUE ACL-Auth-Level ACL-Auth-SecurityAdminLevel 2003 In the RADIUS server, define the list of users authorized to use the gateway, using oneof the password authentication methods supported by the server implementation. Thefollowing example shows a user configuration file for FreeRADIUS using a plain-textpassword.
