Table of Contents
Advertisement
Appendix E Using RADIUS Authentication
E.3 Setting Up the RADIUS Server
●
Set the Accessible User Group and the Authentication Method
(1) Select [Start] → [Administrative Tools] → [Server Manager].
(2) Select [Roles] → [Network Policy and Access Services] → [NPS] → [Policies] →
[Network Policies].
Right-click [Network Policies], select [New], and set the various items.
•
Click "Add" in the "Conditions" tab and add "Windows Groups". For "Windows
Groups", add the group that was created for the ETERNUS DX Disk storage sys-
tem.
•
For the "secure authentication methods", check "Encryption authentication
(CHAP(C))" or "Unencrypted authentication (PAP,SPAP)(S)". Select the same
setting as is set on the ETERNUS DX Disk storage system.
●
Set the role with Vendor Specific Attribute (VSA)
(1) Select [Start] → [Administrative Tools] → [Server Manager].
(2) Select [Roles] → [Network Policy and Access Services] → [NPS] → [Policies] →
[Network Policies].
Select and double-click the newly added policy.
(3) Set the following items using the [Add] button under [Vendor Specific] on the [Set-
tings] tab.
•
For the "Attributes", add "Vendor-Specific/RADIUS Standard".
•
For the "Enter Vendor Code", enter "211".
•
For the "RADIUS RFC", click "Yes, it conforms".
•
For the "Vendor-assigned attribute number", enter "1".
•
For the "Attribute format", select "String".
•
For the "Attribute Value", enter the role name(s) that are registered on the
ETERNUS DX Disk storage system, and which the users who belong to the
added "Groups" can select when logging on to the ETERNUS DX Disk storage
system. The server-side role names are case sensitive and must be input
correctly.
[Example] RoleName0
ETERNUS Web GUI User's Guide
Copyright 2011 FUJITSU LIMITED
633
P2X0-1090-02ENZ0
Advertisement
Table of Contents
