To use the RADIUS Authentication and Authorization method, Session Management must be enabled. To enable Session Management, follow the steps below:

  1. In the main menu of the LoadMaster WUI, select Certificates & Security.

  2. Select the Enable Session Management check box.

  3. Enter User and Password details and click the Login button.

  4. In the main menu of the LoadMaster WUI, select Certificates & Security > Admin WUI Access.

    When Session Management is enabled on the LoadMaster, follow the steps below to configure RADIUS authentication:

  5. In the main menu of the LoadMaster WUI, navigate to Certificates & Security > Remote Access.

  6. Click WUI Authorization Options.

  7. Enter the Radius Server IP address and Port.
    Note: IPv6 is not supported for RADIUS authentication.
  8. Select the Radius Authentication check box.
  9. Select the Radius Authorization check box.
  10. Click Radius Server.
  11. Enter the Shared Secret.
    Note: The Shared Secret should be the same as the one entered during the Add a RADIUS Client section.
  12. Click Set Secret.
  13. If necessary, fill out details for a Backup Radius Server.
  14. Enter the Revalidation Interval.
  15. Click the Set Interval button.
Note: The RADIUS authorization method can only be used if the RADIUS authentication method is selected.
Note: There is a Test AAA for User section at the bottom of this screen. When session management is enabled, you can enter a valid Username and Password to test.
  1. Decide whether or not to enable the Send NAS Identifier check box.
    Note: If this check box is disabled (default), a NAS identifier is not sent to the RADIUS server. If it is enabled, a Network Access Server (NAS) identifier string is sent to the RADIUS server. By default, this is the hostname. Alternatively, if a value is specified in the RADIUS NAS Identifier text box, this value is used as the NAS identifier. If the NAS identifier cannot be added, the RADIUS access request is still processed.
  2. If you enabled the Send NAS Identifier check box, decide whether or not to specify the RADIUS NAS Identifier.
    Note: If the Send NAS Identifier check box is selected, the RADIUS NAS Identifier field is shown. When specified, this value is used as the NAS identifier. Otherwise, the hostname is used as the NAS identifier. If the NAS identifier cannot be added, the RADIUS access request is still processed.
  3. Decide whether or not to enable the Send Vendor Specific check box.
Note: When this is enabled and a user is logging into the LoadMaster UI using RADIUS authentication with Cisco Access Control Server (ACS) or Identity Services Engine (IDE), the LoadMaster sends an Attribute Value Pair (AVP) to the server as part of the login request which contains Progress Kemp's vendor ID. The server can use this AVP upon receipt to identify the LoadMaster device. The format and requirements for this attribute are in Section 5.26 of RFC 2865. The Progress Kemp vendor ID is 12196.