1

H Ho ow w t t o o i i m mp pl l e em me en nt t R RA AD DI IU US S a au ut t h he en nt t i i c ca at t i i o on n f f o or r U Us se er r
M Ma an na ag ge em me en nt t ? ?
We will take Windows2008 R2 as the RADIUS server for this case.

Settings on RADIUS server:
1. Click Start and open Server Manager.

2
2. Create a user account and password (e.g., vivi in this case) by clicking Local Users and
Groups>>Users.)

3. Locate RADIUS Client and right click the mouse button to select New.

3
4. Type the related information (for Friendly name, Address (IP or DNS), shared secret and so on)
for the client. Keep the value of the shared secret in mind. At last, click OK to save the settings.

5. Open NPS>>Policy>>Network Policy. Right click the mouse button on theNetwork Policy
to select New.

4
6. A pop-up window will appear as follows. Please type the name of the policy (e.g., User-Based
in this case) and click Next.

7. In the following page, simply click Add.

5
8. Choose Authentication Type and click Add for next step.

9. In the following dialog, check the box of PAP. Then, click OK.
User Management of Vigor router can only supports PAP authentication. Therefore, configure
the RADIUS server to accept PAP authentication.


6
10. In the following dialog, click Next.

11. Choose Access granted and click Next.

7
12. Check the box of Unencrypted authentication (PAP, SPAP) and click Next.


13. When the following dialog appears, simply click No.

8
14. In the following window, just click Next.

15. Then, click Next.

9
16. Now, the network policy (named with User-Based) has been created. Click Finish.

Settings on Vigor3200:
1. Access into the web configurator of Vigor3200.
2. Open Application>>RADIUS. Configure RADIUS server IP and Shared Secret. The value for
Shared Secret should be the same as the settings configured in Step 4 described above for
Settings on RADIUS server.

3. Click OK to save the settings.
10
4. Open User Management>>User Profile (Reserved) and click Index #3 to create a user profile.

5. Check the box of Enable this account and type a user name for such profile. Choose Radius as
External Server Authentication and click OK to save the settings.


11
6. Open User Management>>General Setup and specify User-Based as the Mode setting. Click
OK.

7. Any user who wants to access into the Internet shall be authenticated by the RADIUS
authentication mechanism. Vigor router will redirect the HTTP connection to the login page as
the picture shown below.

12
8. If the access is granted, the following screen will appear.