114 DOMINION SX I NSTALLATION AND O PERATIONS MANUAL− If the RADIUS Server is not configured for Vendor-Specific type or it fails to follow the abovespecifications, the value specified for the Service-Type will determine the privileges to be given tothe user. In this case, the user will be given access to all the ports. Our RADIUS clients buildinside the Dominion SX unit the following attributes and maps them in the following order:VALUE ATTRIBUTE NAME VALUE NAME /TYPE DESCRIPTION6 Service-Type What type of Service the user receives?1) Login Maps to observer2) Framed Maps to observer3) Callback Login Maps to observer4) Callback Framed Maps to observer5) Administrative Maps to an administrator6) NAS prompt Maps to an operator7)Callback NAS prompt Maps to an observerNote: For more information and examples, please see Step E. in the Install and Configure the RADIUSServer for Windows 2000 section that follows.Install and Configure the RADIUS Server for Windows2000A. Install IAS (Internet Authorization Service)1. Insert the Windows 2000 Server compact disc and start the Setup program.2. Click Install Add-On Components, and then click Add/Remove Windows Components.3. In Components, click Networking Services (but do not select or clear its check box), and then clickDetails.4. Select the Internet Authentication Service check box and click on the [OK] button.5. Click on the [Next] button.B. Configure IAS Port Information1. To configure a remote IAS server, you must have administrative privileges on the remote server.2. Open IAS: select Start → Programs → Administrative Tools → Internet Authentication Service.3. Right-click on Internet Authentication Service and select Properties from the drop-down menu.4. Click on the RADIUS tab, and examine the settings for ports. If your RADIUS authentication andRADIUS accounting UDP ports differ from the default values provided (1812,1645 for authenticationand 1813,1646 for accounting), in Authentication and Accounting, type your port settings. Thevalues of 1812 for authentication and 1813 for accounting are the RADIUS standards at this time.However, many network access servers use port 1645 for authentication requests and 1646 foraccounting requests by default. To use multiple port settings for authentication or accounting requests,separate the ports by using commas.C. Configure Event Logging for IAS1. Open IAS.2. Right-click on Internet Authentication Service and select Properties from the drop-down menu.3. Click on the Service tab and select each option that is appropriate.4. Click on the [OK] button.Note: Selecting Log successful authentication requests can result in extremely large amounts of databeing logged. Before selecting this option, verify that the Event Viewer is configured with a maximum logsize that will accommodate this type of event logging.
