managementauthenticationusingwindowsiasasaradius.docVIP

Management Authentication using Windows IAS as a Radius Server OVERVIEW: In this we are using Radius server Windows IAS as a backend server for the management authentication for the controller. When the user try to login into the controller the request will first go to the external radius server to validate. If the user entry is present in the Windows AD(Active Directory) the success authentication will happen and the user can login into the controller with the admin rights. We are using this technique as to provide more security within the network, i.e. only valid users those have a privilege can access the network device. Q: What are the settings I have to configure on the controller as well as on the radius server for successful management authentication and bypass the enable password? First of all we have to configure an external radius server (IAS). Please do the below steps to configure the radius server. Please navigate to Start - Settings - Control Panel - Administrative Tools - Internet Authentication Service -click Right click on the Internet Authentication Service(local) and check whether the service is start or not. If not please start the service. Right click on the “Radius Clients” and select New Radius Client. Specify any friendly name to the radius client and below mention the controller’s IP address or Switch IP address. Click on next button. Specify the Shared Secret key in the below screen (in my case its “aruba@123”) and click the finish button. Now create the remote policy, right click on the “Remote Access Policies” and select “New Remote Access Policy” the below screen will appears. Lick on the next button Select the first option “Use the wizard to set up” and give some name to the remote policy e.g. Remote-Policy. Click on the next button Select the options based on the method used to gain access to the network. In our case I am using Wireless. Click on next button Select the user or gr