Radius Authentication on the securityProbe

User Manual

Help Version updated till firmware 404p Copyright © 2012, AKCess Pro Co., Ltd..

Radius on the SEC User Manual

- 2 -

Table of Contents

Introduction / What is RADIUS

Setting Up Radius on the securityProbe

1. Enable Radius Server

2. Downloading FreeRadius Server

3. Downloading Notepad ++

Setting up the Radius Server (FreeRadius)

4. Modify FreeRadius Files

Final Settings and Testing the Connection

5. Setting the connection in the securityProbe Web UI.

Radius on the SEC User Manual

- 3 -

Introduction / What is RADIUS

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service.

This is a feature that we added to the securityProbe’s web interface so that the unit can be accessed securely through a Radius Server running on the Local Area Network. It is used to;

A. To authenticate users or devices before granting them access to the units web interface,

B. To authorize those users or devices for access the the units web interface.

C. Accounting is the process of generating log files that record session statistics used for billing, system diagnosis, and usage planning.

Setting Up Radius on the securityProbe

1. Enable Radius Server

We first need to log in to the securityProbe base unit as an Administrator, then navigate to the Settings page >> System Administrator >> Password Checking then click on the Enabled check box as shown in the screen shot above.

Radius on the SEC User Manual

- 4 -

Now we can enable the Radius on the securityProbe by adding the check box next to the Radius as shown in the screen shot above.

This will display the Radius setup page as shown in the screen shot above. We now need to download and install our Radius Server on our machine as follows.

We will come back to this page later in the manual to enter the settings.

Radius on the SEC User Manual

- 5 -

2. Downloading FreeRadius Server

We now need to download the FreeRadius server from this link here:

http://freeradius.net/Downloads.html

Then install this on our server machine by running the executable file.

3. Downloading Notepad ++

Next we need to download the Notepad ++ for editing the FreeRadius files

http://notepad-plus-plus.org/download/v6.3.html

Setting up the Radius Server (FreeRadius)

4. Modify FreeRadius Files

Now we need to edit clinets.conf file by opening an Explorer dialog box and browsing to this directory C:\FreeRADIUS.net\etc\raddb\clients.conf then right mouse clicking on the file and choosing the “Edit with Notepad ++” option as shown in the screen shot above.

Radius on the SEC User Manual

- 6 -

The “Shared secret” is set in here in the clients.conf. This will also be set in the Radius settings in the securityProbe web interface. If we leave the default shared secret this would be testing123

Next we will edit the users.conf. file on the next page.

Radius on the SEC User Manual

- 7 -

Just as we did with the clinets.conf, now we need to edit clinets.conf file by opening an Explorer dialog box and browsing to this directory; C:\FreeRADIUS.net\etc\raddb\users.conf then right mouse clicking on the file and choosing the “Edit with Notepad ++” option as shown in the screen shot above.

Radius on the SEC User Manual

- 8 -

The FreeRadius Username and password are set here in users.conf

In the line "FreeRADIUS.net-Client User-Password == "demo"

you can add the user and password after this line.

For example,

testuser User-Password == "testpw"

This means

username: testuser

password: testpw

Next we will restart the FreeRadius server.

Radius on the SEC User Manual

- 9 -

To open the FreeRadius and run commands, first click on the icon in the Windows task bar as shown in the screen shot above

.

After you set the shared secret or user/pass, we need to restart the FreeRadius server as shown in the screen shot above.

Radius on the SEC User Manual

- 10 -

Final Settings and Testing the Connection

5. Setting the connection in the securityProbe Web UI.

After enabling the primary and secondary Radius Authentication Server, we will enter the IP address of the server machine, the shared secret, confirm this and click on the “Send Testing Request” button which will bring up the dialog box as shown in the screen shot above. Now you will enter the Username and Password and click the “Send Testing Request” button.

If the FreeRadius server service is running and the settings are connect, you will receive the “Successful” notification shown in the screen shot above.

Radius on the SEC User Manual

- 11 -

Now pressing the “Save” button will save the settings. You would simply repeat the steps shown to connect to a secondary server or Radius Accounting server.

Radius on the SEC User Manual

- 12 -

The system will then log you out of the web interface and connect to the Radius server service running on the machine. As shown in the screen shot above.

Now you can log into the web interface using your new Radius username and password as shown in the screen shot above.

Important Note: If you happen to get logged out of the unit while setting up the Radius server or do not want to use the Radius server to log in, you can press the reset button on the back of the unit for 7 seconds or until the unit announces it is disabling the password checking. Wait about 10 seconds then you should be able to open the web UI without any passwords.

This concludes the Radius Server user manual.

Please contact support@akcp.com if you have any further technical questions or problems setting up your DCS15 or your alerts.

Thanks for Choosing AKCess Pro!