RADIUS Server Configuration

Overview

The following guide covers steps to configure NAC as a RADIUS server. By configuring NAC as a RADIUS server, multiple options become available to the environment:

• A RADIUS authentication server with the ability to support the following authentication types:

  • MAC authentication
  • EAP-PEAP (Direct Active Directory Authentication)

• Ability to conditionally proxy RADIUS server requests to any number of upstream RADIUS servers.

• Ability to assign a specific set of RADIUS attributes on association. The specific attributes available will depend on the vendor that is chosen and can include:

  • VLAN assignments
  • Vendor specific profiles or roles
  • ACL names

• Ability to perform enforcement actions using just the RADIUS NAS device.

NAC Installation

If you have not configured your NAC appliance with an IP address and confirmed access to the proactive Impulse Management Services, please contact Support at opswat.com/support

Step 1: NAC RADIUS Server Authentication Mode Configuration

Step 2: NAC RADIUS Clients Configuration

Step 3: NAC RADIUS Network Environment Configuration

Step 4: NAC Roles for use with RADIUS

Troubleshooting: NAC RADIUS Troubleshooting