BSGX4e Business Gateway User Guide 69
Release 01.01 NN47928-102
User Management
provides legacy authentication, which enables the BSGX4e to function as a
Network Access Server (NAS)
NOTE: The password of a user account is externally authenticated by a Radius
server only if its auth parameter value is Radius. This value can be
specified for the user account or for a user group to which the user
account belongs. User account configuration is described on page 61 and
user group configuration is described on page 64.
Configuration Requirements
For a user account to use Radius authentication, the following requirements must be
met:
1. The authentication (auth) value for the user account must be RADIUS. (User
account configuration is described on page 61.)
2. The Radius client must have an authentication record for the user account.
3. The user account and its password must be defined on the external Radius server.
Configuration Steps
To configure a user account to use Radius authentication, perform these steps:
1. Change the authentication (auth) value for the user account to Radius.
(User account configuration is described in “User Accounts” (page 61))
2. Configure a Radius authentication record for the user account.
3. Configure the user account and its password on the external server.
NOTE: Disabling its authentication record suspends Radius authentication for a
user account. This prevents logons by the user account until either its
authentication record is reenabled or its authentication method (auth
value) is changed.
Radius Authentication Records
After you configure a user account to use Radius authentication, you must configure
a Radius authentication record for that user account. Every user account that uses
Radius password authentication must have its own Radius authentication record.
NOTE: You must configure the user account before you configure the
corresponding Radius authentication record. For more information, see
“User Accounts” (page 61).
Each user account that is to use Radius password authentication must have its own
Radius authentication record. If the same Radius server is referenced by every user
account, the same values are specified in every authentication record.
NOTE: Deleting the user account also deletes its authentication record.
The Radius authentication record specifies:
