Problem: Would like to setup RADIUS (token) authentication as a 2nd factor authentication method.
Prerequisite(s):
- RADIUS server IP/port#
- RADIUS server secret key
- Access to Server Management console (8090 console)
Solution(s): It's important to have the 8090 console because if you misconfigure the RADIUS settings you will not be able to login from traditional login page. You will need to go in through 8090 console -> Settings -> webAdmin Dashboard to turn off RADIUS authentication. If you are unfamiliar with the previous description, do NOT continue and contact support for assistance.
Steps how-to enable:
- Go to webAdmin -> Tree Root -> Stoneware
- Expand DefaultLoginPolicy (or equivalent login policy object)
- Right-click on DefaultLoginPolicy and create a new object of type Login Attribute
- Enter name RadiusAttribute
- Enter the following information:
Application type: Authorization
Description: Radius-Password
Name: [RADIUS.password]
- Click Save button
- Click on DefaultLoginPolicy object
- Under Ordered Attributes, click + button to add
- Add in the RadiusAttribute
- Go to the Options panel
- Turn on Radius Authentication checkbox
- Enter the IP address for the Authentication Server
- Enter the Authentication Port
- Enter the IP address for the Accounting Server (Optional)
- Enter the Accounting Port (Optional)
- Enter the shared secret for the RADIUS server
- Click Save button
- Restart relay from 8090 console
- Test login