Juniper JunOS vSRX - RADIUS with AM Configuration - SecurID Access Implementation Guide
2 years ago
Originally Published: 2022-01-06

This section describes how to integrate Juniper JunOS vSRX with SecurID Authentication Manager using RADIUS.

Architecture Diagram

jaink9_0-1641491713048.png

Configure SecurID Authentication Manager

To configure your SecurID Authentication Manager for use with a RADIUS Agent, you must configure a RADIUS client and a corresponding agent host record in the Authentication Manager Security Console.

The relationship of agent host record to RADIUS client in the Authentication Manager can 1 to 1, 1 to many or 1 to all (global).

SecurID Authentication Manager listens on ports UDP 1645 and UDP 1812.

 

Configure Juniper JunOS vSRX

Perform these steps to configure Juniper JunOS vSRX as a RADIUS client to SecurID Authentication Manager.

Procedure

  1. Login to J Web console of JunOS vSRX and browse to User Management > Authentication Methods > Radius Servers and click Configure. Once the pop-up window opens click +.

    jaink9_1-1641491762416.png
    1. Name –Not Required

    2. RADIUS Server – Enter the IP of SecurID Authentication Manager. In this case it is 10.100.53.145.

    3. Password – Use the shared password as entered in Configure SecurID Authentication Manager.

    4. Confirm Password – Use the shared password as entered in Configure SecurID Authentication Manager.

    5. Server Port – 1812

    6. Authentication Mechanism – Not Required

    7. Retry Attempts – 3

    jaink9_2-1641491797604.png
  2. Click Ok.

  3. Enable Radius Servers.

    jaink9_3-1641491842010.png
  4. Click Save -> Commit.

    jaink9_4-1641491874933.png

 

Return to the main page for more certification related information.