How to configure SZ admin user authentication against RADIUS server
Summary
The article describes SZ management user configuration for authentication using a Radius serverQuestion
How to configure vSZ Admin/management users to use Radius admin authentication?Customer Environment
SZ, vSZ, RADIUS, NPS serverResolution
Step 1: Create Role/Group:- Login to the vSZ-H -->Administration -->Admins and Roles -->Groups -->Create
Step 2: Create a Group/Role and give the required permission:
Step 3:- Add the resources:-
Step 4:- Add the Domain:
Step 5: Add/Create the Users:
Step 6: Create AAA server:
- Login to vSZ GUI --> Administration --> Admins and Roles --> AAA --> Create --> Add the Server details with shared secret --> Click Ok
-Select the User Group that was created earlier(Group1) and Administrator as "RuckusAdmin".
-Realm should be same as the user account domain on AD.
Step 7:- AD server configuration.
a. Open Server Manager-->Tools--> click on Active Directory Users and computer
Step 7:- Create a User Group/User on AD to grant access.
a. Right click Users and create a new group, give it an appropriate name: Example: Ruckus-WSG-User-User1
b. Create or add a user to this new group:
Step 8:- Configure NPS to allow the new Group Access:
a. Open “Network Policy Server”, expand “Policies” and create a new Policy to allow the newly
created domain Group:
b. Edit the New Policy and go to Conditions>UserGroups and click on the “Add” button to add group "Ruckus-WSG-User-User1" that was created earlier.
c. Edit the New Policy and go to Settings>Vendor Specific and click on the “Add” button and then in the VSA attribute select Vendor-Specific: Radius Standard
d. In the Attribute information dialog, click on “Add”:
e. In the Vendor-Specific Attribute Information dialog, enter Ruckus vendor code of 25053 and
select “Yes. It conforms” and click on “Configure Attribute”:
f. In the “Configure VSA (RFC Compliant)” dialog set the attribute number to 10, use a String
format and provide the String value. It should match the string configured in Step 5:
Note: Screenshot from step 5: The name of the User created should match the above String:
g. Click OK and verify the new NPS policy show the correct:
h. Create a RADIUS client--> Right click RADIUS client--> New--> add vSZ IP address and shared secret that was configured in step 6.
Note: You can run the ‘Test AAA’ to verify the connectivity.
Step 9:- Login with the Username:- ‘username@domain_name/realm_name’ and the correct password.
Example:-
Article Number:
000008283
Updated:
November 25, 2024 03:57 AM (18 days ago)
Tags:
Configuration, Troubleshooting, virtual SmartCell Gateway
Votes:
0
This article is:
helpful
not helpful