Setting Up Dial Access Services

You must perform the following tasks to create and set up the necessary NDS objects in your NDS tree to support dial access services with Novell RADIUS Services:

• Creating and Setting Up Dial Access System Objects
• Creating Dial Access Profile Objects
• Creating and Setting Up User Objects

Creating and Setting Up Dial Access System Objects

You must create a Dial Access System object in your NDS tree to manage common configuration tasks for a collection of RADIUS servers working together. The information stored in this object consists of the following:

• Clients---Enables you to define IP addresses for network access servers and shared secrets among the RADIUS servers and the various network access servers.
• Domains---Enables you to configure other RADIUS servers to which you want to forward RADIUS requests.
• Username Resolution---Enables contexts to be searched when the common name portion of the username is received in an authentication request.
• Miscellaneous---Enables you to change the Dial Access System Password and install an attribute file.
• Remote connection restrictions---Enables you to limit the number of connections that a remote user can have concurrently per network.

Typically, you need only one Dial Access System object in your NDS tree.

You can easily assign rights to an NDS object using ConsoleOne^TM. For example, you can assign Browse and Read rights from ConsoleOne by dragging the Dial Access System object over an Organizational Unit object near the root of an NDS tree.

This section contains the following tasks:

• Creating a Dial Access System Object

Creating a Dial Access System Object

To create a Dial Access System object, complete the following steps:

1. Start ConsoleOne.

2. Right-click on an Organizational Unit container object.

3. Click New > Object > RADIUS:Dial Access System.

4. Specify the name, password, and clients of the Dial Access System object.

Refer to the context-sensitive help for more information.

Creating Dial Access Profile Objects

You must create at least one Dial Access Profile object in your NDS tree to define common services used by many dial-in users. The Dial Access Profile object contains a list of RADIUS dial access attributes that specify the configuration for creating a specific service.

You can set up as many profiles as you need to define different services. For example, you can create a Point-to-Point Protocol (PPP) profile that enables users to dial in and access the Internet. You can also create a Telnet profile that enables users to connect to a local host using a terminal or terminal emulator. You can specify dial access profiles in the User object that can override settings in the Dial Access Profile object.

Creating a Dial Access Profile Object

To create a Dial Access Profile object, complete the following steps:

1. Start ConsoleOne.

2. Right-click on an Organizational Unit container object.

3. Click New > Object > RADIUS:Profile..

4. Specify the name and properties of the Dial Access Profile object.

Refer to the context-sensitive help for more information.

Creating and Setting Up User Objects

The User Dial Access Services page allows you to

• Enable a user for dial access services
• Select the appropriate Dial Access System object for a user
• Configure (or define) dial-in services for a user (such as enabling a user to select one or more Dial Access Profile objects and associate user-specific settings for each)
• Select a default dial access service if a user is configured for more than one
• Configure remote connection restrictions as well as view active connections and connection history

This section contains the following tasks:

• Enabling a User Object for Dial Access Services
• Disabling Dial Access Services for a User Object

Enabling a User Object for Dial Access Services

To enable a User object for dial access services, complete the following steps:

1. Start ConsoleOne.

2. Double-click a User object.

3. Click the Dial Access Services tab and specify the dial access properties.

Refer to the context-sensitive help for more information.

Disabling Dial Access Services for a User Object

To disable a User object for dial access services, complete the following steps:

1. Start ConsoleOne. select the User object.

2. Double-click a User object.

3. Click the Dial Access Services tab > Disable.

Refer to the context-sensitive help for more information.