Configure RADIUS Server

Configure RADIUS Server allows you to configure a RADIUS server to authenticate users for SFM sign-in.

RADIUS stands for Remote Authentication Dial In User Service and is a protocol for allowing network devices to authenticate users against a central database. In addition to user information, RADIUS can store technical information used by network devices such as protocols supported, IP addresses, telephone numbers, routing information, and so on. Together this information constitutes a user profile that is stored in a file or database on the RADIUS server.

RADIUS servers provide authentication, authorization, and accounting functions but device uses only the authentication function of the RADIUS server.

Before you can use RADIUS authentication, you must have a functioning RADIUS server on the network.
  1. Go to System & Monitor > System Settings > System > Authentication Server and select Add.
  2. Select Server Type as RADIUS Server. If user is required to authenticate using a RADIUS server, device needs to communicate with RADIUS server for authentication.
  3. Enter the details.
    Server Name
    Name to identify the RADIUS Server.
    Server IP
    Specify RADIUS Server IP address.
    Authentication Port
    Specify port number through which server communicates.
    Default port - 1812
    Shared Secret
    Specify share secret, which is to be used to encrypt information passed to the device.
    Figure: Add RADIUS Server
  4. Click Test Connection button to check the connectivity between RADIUS and the device.
  5. Click Save.
    Note SFM will not fetch user directly from RADIUS server. SFM admin must create user with Authentication Type - External from System & Monitor > System Settings > Administration > User.