162 | SRA 6.0 Administrator’s GuideStep 19 If you select using domain name, an E-mail domain field appears below the drop-down list.Type in the domain name where one-time password emails will be sent (for example, abc.com).Step 20 Click Accept to update the configuration. Once the domain has been added, the domain will beadded to the table on the Portals > Domains page.Step 21 Click the configure button next to the RADIUS domain you added. The Test tab of the EditDomain page displays.Step 22 Enter your RADIUS user ID in the User ID field and your RADIUS password in the Passwordfield.Step 23 Click Test. The SRA appliance will connect to your RADIUS server.Step 24 If you receive the message Server not responding, check your user ID and password and clickthe General tab to verify your RADIUS settings. Try running the test again.Note The SRA appliance will attempt to authenticate against the specified RADIUS serverusing PAP authentication. It is generally required that the RADIUS server beconfigured to accept RADIUS client connections from the SRA appliance. Typically,these connections will appear to come from the SRA appliance X0 interface IPaddress. Refer to your RADIUS server documentation for configuration instructions.Configuring Two-Factor AuthenticationTwo-factor authentication is an authentication method that requires two independent pieces ofinformation to establish identity and privileges. Two-factor authentication is stronger and morerigorous than traditional password authentication that only requires one factor (the user’spassword).For more information on how two-factor authentication works see “Two-Factor AuthenticationOverview” section on page 43.Dell SonicWALL’s implementation of two-factor authentication either uses two separateRADIUS authentication servers, or partners with two of the leaders in advanced userauthentication: RSA and VASCO. If you are using RSA, you must have the RSA AuthenticationManager and RSA SecurID tokens. If you are using VASCO, you must have the VASCOIdentiKey and Digipass tokens.To configure two-factor authentication, you must first configure a RADIUS domain. Forinformation see “Adding or Editing a Domain with RADIUS Authentication” section on page 160.
