Defender 5.11 - Administration Guide

RADIUS Payload tab

This tab allows you to view the current and assign a new RADIUS payload to the Access Node. The tab has the following elements:

• Assigned Payload  Shows the RADIUS payload that is currently assigned to the Access Node. When there is no RADIUS payload assigned to the Access Node, this option displays <undefined>.
• Select  Allows you to select a RADIUS payload to assign to the Access Node.
• Clear  Unassigns the current RADIUS payload from the Access Node.
• Inherit payload entries from parent. Include these with entries explicitly defined here.  When selected, causes the Access Node to inherit RADIUS payload from the Defender Security Servers to which the Access Node is assigned.
• Effective  Click this button to view the RADIUS payload that will apply to a specific user for a particular Defender Security Server/Access Node combination. The windows that opens looks similar to the following:

   

Managing Defender Security Servers

Defender Security Server is the point in your network where user authentication is performed. If authentication is successful, the user is allowed access to the network.

• Creating a Defender Security Server object
• Modify Defender Security Server object properties

Creating a Defender Security Server object

To create a Defender Security Server object

1. On the computer where the Defender Administration Console is installed, open the Active Directory Users and Computers tool (dsa.msc).
2. In the left pane (console tree), expand the appropriate domain node, and then expand the Defender container.
3. Right-click the Security Servers container, point to New, and then click Defender Security Server.

   A wizard starts.

4. In the Enter a name, IP address and description for the Security Server step, use the following options:
   • Name  Type a name for the Defender Security Server object to be created in Active Directory. This name can be different from the name of the computer on which the Defender Security Server component is installed.
   • IP Address  Type the IP address of the computer on which you have installed the Defender Security Server component.
   • Description  Type a friendly Defender Security Server description to be displayed in Active Directory.
5. Complete the wizard to create the Defender Security Server object in Active Directory.

After creating a Defender Security Server object, you need to modify its properties to assign a Defender Security Policy, Access Node, and RADIUS payload to that object. For more information, see Modify Defender Security Server object properties.

Modify Defender Security Server object properties

To modify Defender Security Server object properties

1. On the computer where the Defender Administration Console is installed, open the Active Directory Users and Computers tool (dsa.msc).
2. In the left pane (console tree), expand the appropriate domain node, and then expand the Defender container.
3. Click to select the Security Servers container.
4. In the right pane, double-click the Defender Security Server whose properties you want to modify.
5. Use the dialog box that opens to modify the Defender Security Server properties as necessary.

   The dialog box has the following tabs:

   • Security Server tab  Allows you to specify a computer on which the Defender Security Server component is installed by IP address, change description provided for the Defender Security Server object in Active Directory, and assign or unassign Access Nodes for the Defender Security Server object.
   • Prompts tab  Allows you to view and modify the messages and prompts that may be displayed to the user during the authentication process.
   • Policy tab  Allows you to assign a Defender Security Policy to the Defender Security Server object.
   • RADIUS Payload tab  Allows you to assign a RADIUS payload to the Defender Security Server object.
6. When you are finished, click OK to apply your changes.