NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
GC728X using RADIUS authentication
I have cnfigured RADIUS authentication on GC108P and that works fine, I have configured on the GC728X x 2 and have the same issue on both the GC728X'es. I am using the "Direct Connect Web Browser" an...
I have manged to fix it, I am using a Synology RADIUS server and LDAP I had to edit the rad_site_def_ldap file and add the following to post-auth
post-auth {
# ldap
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
if (User-Name == "YourUser") { update reply { Service-Type = "Administrative-User" } }
I have manged to fix it, I am using a Synology RADIUS server and LDAP I had to edit the rad_site_def_ldap file and add the following to post-auth
post-auth {
# ldap
exec
Post-Auth-Type REJECT {
attr_filter.access_reject
}
if (User-Name == "YourUser") { update reply { Service-Type = "Administrative-User" } }
The service-type definition for the admin user is required if using Radius for the admin access. It's a part of the manage Device Security - HTTP Authentication List config (https://www.downloads.netgear.com/files/GDC/GC728X/GC728X_XP_GC752X_XP_UM_EN.pdf p.262). It can be set to:
Local. The user’s locally stored ID and password are used for authentication. Since
the Local method does not time out, if you select this option as the first method, no
other method is tried, even if you specified more than one method.
Radius. The user’s ID and password are authenticated using the RADIUS server. If
you select Radius as the first method and an error occurs during the authentication,
the switch uses Method 2 to authenticate the user.
Tacacs+. The user’s ID and password are authenticated using the TACACS+ server.
If you select Tacacs+ as the first method and an error occurs during the
authentication, the switch attempts user authentication Method 2.
Local. The user’s locally stored ID and password are used for authentication. Since
the Local method does not time out, if you select this option as the first method, no
other method is tried, even if you specified more than one method.
Radius. The user’s ID and password are authenticated using the RADIUS server. If
you select Radius as the first method and an error occurs during the authentication,
the switch uses Method 2 to authenticate the user.
Tacacs+. The user’s ID and password are authenticated using the TACACS+ server.
If you select Tacacs+ as the first method and an error occurs during the
authentication, the switch attempts user authentication Method 2.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
