Page History

Create a RADIUS logon procedure

1. Login to the DualShield management console
2. In the main menu, select “Authentication | Logon Procedure”
3. Click the “Create” button on the toolbar
4. Enter “Name” and select “RADIUS” as the Type
   Image Removed
   Image Added
   
   
5. Click “Save”
6. Click the Context Menu icon of the newly create logon procedure, select “Logon Steps”

Image Added

    7. In the popup windows, click the

“Add” button on the toolbar

Image Added

   8. Select the desired authentication method, e.g. “Static Password + One-Time Password” 

Image Removed

        Image Added

  9. Click “Save”

Create a RADIUS application

1. In the main menu, select “Authentication | Applications”
2. Click the “Create” button on the toolbar
3. Enter “Name”
4. Select “Realm”
5. Select the logon procedure that was just created 
   Image Removed
   Image Added
   
   
6. Click “Save”
7. Click the context menu of the newly created application, select “Agent”Image Removed

Image Added

   8. Select the DualShield Radius server, e.g. ”Local Radius Server”

Image Added

  9. Click “Save”

  10. Click the context menu of the newly created application, select “Self Test”

Image Modified

Register the

Sophos XG Firewall as a Radius client

1. In the main menu, select “RADIUS | Clients”
2. Click the “Register” “Create” button on the toolbarImage Removed
   
3. Select the application that was created in the previous steps
4. Enter Astaro Security Gateway UTM’s IP in the IP address
5. Enter the Shared Secret which will be used in Astaro Security Gateway UTM.
6. Complete as per the example screenshot below, selecting your DualShield Radius server and the Application you created in the previous step.

Image Added

    4. To add the IP address of your Sophos XG Firewall click on the cog wheel button to the right

Image Added

   5. Enter the IP address details, click "Add' then "Save".

   6. Ensure the Shared Secret that you entered matches the one specified on the Sophos XG Firewall configuration

   7. Click “Save”