WatchGuard Firebox System 7.0 User Guide

Chapter 10: Creating Aliases and Implementing AuthenticationAlthough WatchGuard supports both CHAP and PAPauthentication, CHAP is considered more secure.From Policy Manager:1 Select Setup => Authentication Servers.The Authentication Servers dialog box appears.2 Click the RADIUS Server tab.The RADIUS information appears, as shown in the followingfigure.3 Enter the IP address of the RADIUS server.4 Enter or verify the port number used for RADIUSauthentication.The default is 1645. RFC 2138 states the port number as 1812,but many RADIUS servers still use port number 1645.5 Enter the value of the secret shared between theFirebox and the RADIUS server.The shared secret is case-sensitive and must be identical on theFirebox and the RADIUS server.6 Enter the IP address and port of the backup RADIUSserver. The RADIUS servers’ secret must be sharedbetween both the primary and backup servers.7 Click OK.8 Gather the IP address of the Firebox and the user orgroup aliases you want to authenticate using RADIUS.The aliases appear in the From and To listboxes for theindividual services.172 WatchGuard Firebox System