Radius - Buffalo BS-GS20 Series User Manual

Chapter 2 Settings

RADIUS

Configure the RADIUS server.
Authentication
Authentication Server IP
Authentication Server
Port
Shared Secret
Reset Timer
Advanced
Notes:
• Use only the primary authentication server under normal conditions. Use the secondary server when a backup
server is used.
• Session-timeout is fixed to 5 seconds and the number of confirmation times is fixed to 3 times.
• To delete configured shared secret, initialize the switch. You do not have to initialize the switch when you change
the shared secret.
RADIUS Server Settings to Use Dynamic VLAN
When dynamic VLAN is enabled, add the following attributes to the RADIUS server.
Attribute
Tunnel-Type
Tunnel-Medium-Type
Tunnel-Private-Group-ID
Check to enable authentication server.
Enter the authentication server's IP address.
Enter the authentication server's port number. (1-65535)
Enter the shared secret of the authentication server. You may enter up to 20
alphanumeric characters, hyphens, and underscores.
Enter the time that passes before re-authentication.
Accounting
If enabled, notify the connection status to the RADIUS server.
Termination-Action
If you follow the termination-action notified by the server, enable this.
Dynamic VLAN Assignment
If enabled, the VLAN to which the port belongs to can change dynamically based
on the authentication information received from the RADIUS server. You need to
add attributes in the RADIUS server settings in advance to use dynamic VLAN . For
more information, refer to "RADIUS Server Settings to Use Dynamic VLAN" section
below.
Note: This product's dynamic VLAN can only be used with 802.1X port
authentication.
Value
13 (VLAN)
6 (IEEE-802)
VLAN ID that the authenticated user will belong to
52