Below are diagrams of 2 typical deployments of RADIUS integration:
Deployment 1: Compact
In this compact deployment, both the DualShield Authentication Server (DAS) and the DualShield RADIUS Server (DRS) are installed and operating on one single server machine that resides in the corporate network.
Deployment 2: Extended
In this extended deployment, the DualShield Authentication Server (DAS) is installed on a server machine that resides in the corporate network, and the DualShield RADIUS Server (DRS) is installed on a server machine that resides in the DMZ.
Ports & Protocols
Port | Protocol | Function | Comment |
---|---|---|---|
1812 | UDP | RADIUS authentication | |
1813 | UDP | RADIUS accounting | Optional in most cases |
8090 | TCP | RADIUS management | Used by the DualShield Authentication Server to manage the RADIUS server |
389 | LDAP | Used in communication between DualShield Authentication Server and AD server | |
636 | LDAPS | Used in communication between DualShield Authentication Server and AD server |