Clients
The Clients page contains a list of clients—such as wireless routers or VPN servers—that are allowed to make requests of RADIUS Server for authentication, authorization, and accounting. For each client, you must enter a client IP address along with a shared secret, which is a text string used as a password between RADIUS clients and RADIUS Server. Shared secrets should be configured on both clients and RADIUS Server.
Two methods are available for adding clients: 1) single IP address and 2) IP address range.
Single IP address
With this procedure, you must add clients by entering specific IP addresses, which provides better security than the IP address range procedure does.
To set up clients by single IP address:
Click Add, choose Single host and enter the following information:
- Name: Enter a display name for the client, which makes it easier to identify.
- IP address: Enter the IP address of the RADIUS client.
- Shared secret: Enter a text string used as a password between the client and RADIUS Server.
IP address range
This procedure allows you to add a large number of RADIUS clients at a time, rather than adding each RADIUS client individually. You can add a group of clients that are all configured with IP addresses from the same subnet. All of the RADIUS clients in the range must use the same configuration and shared secret.
Before You Start
The following guidelines are here to help you specify an IP address range:
- Overlapping subnets are allowed. RADIUS Server will only verify clients on the smallest subnet. In the example below, RADIUS Server will verify the clients' credentials using the shared secret in the first row.
- Identical subnets are not allowed. In the example below, with the presence of the first row, entering another IP address range with an identical subnet mask, as shown in the second row, is not allowed.
| IP address | Subnet mask | Shared secret |
|---|---|---|
| 192.168.1.1 | 255.255.255.0 | 12345678 |
| 192.168.1.1 | 255.255.0.0 | 87654321 |
| IP address | Subnet mask | Shared secret |
|---|---|---|
| 192.168.1.1 | 255.255.255.0 | 12345678 |
| 192.168.1.2 | 255.255.255.0 | 87654321 |
To set up clients by IP address range:
Click Add, choose Subnet and enter the following information:
- Name: Enter a display name for the collection of clients, which makes it easier to identify.
- IP address: Enter one of the IP addresses of the RADIUS clients.
- Subnet mask: Enter a subnet mask, for example, 255.255.255.0. For more information about subnet masks, please see here.
- Shared secret: Enter a text string used as a password between the clients and RADIUS Server.
More Information
Client name must be of 1 to 32 Unicode characters and must not contain the following characters:
! " # $ % & ' ( ) * + - , / : ; <= > ? @ [ ] \ ^ ` { } | ~