Before you set up BIG-IQ^® Centralized Management for authentication and authorization with your RADIUS server, gather the following information.

1. At the top of the screen, click System.
2. On the left, click USER MANAGEMENT > Auth Providers .
3. Click the Add button.
4. From the Provider Type list, select RADIUS.
5. In the Name field, type a name for this new provider.
   This must be a unique name, and can be a maximum of 152 characters.
6. For the Servers setting, In the Host and Port fields, type the RADIUS server's IP address (or fully qualified domain name) and port number for each of the servers you want to configure.

   The primary server is mandatory. A secondary server and tertiary server, which will be used if the primary or secondary servers fail, are optional.

7. In the Secret field, type the case-sensitive text string used to validate communication.
8. In the Test User and Test Password fields, type a user and password, then click the Test button to verify that BIG-IQ can reach the RADIUS server
9. Click the Save & Close button at the bottom of the screen.

1. From a Linux machine, copy the TinyRadius .jar file to your BIG-IQ system by typing: scp <big-iq-user>@<BIG-IQ-Address>:/usr/share/java/TinyRadius-1.0.jar ~/tmp/tinyrad-upgrade/
2. Extract the file on your Linux Machine by typing: jar -xvf TinyRadius-1.0.jar
3. Edit the org/tinyradius/dictionary/default_dictionary, adding the vendor-specific attribute.

   rm TinyRadius-1.0.jar
   jar cvf TinyRadius-1.0.jar *
   

4. Update the jar on the BIG-IQ system by typing: scp TinyRadius-1.0.jar <your_user>@<BIG-IQ address>:/var/tmp/
5. SSH to the BIG-IQ system and type the following commands:

   mount -o remount,rw /usr
   cp /var/tmp/TinyRadius-1.0.jar /usr/share/java
   mount -o remount,ro /usr
   bigstart restart restjavad
   

6. Repeat steps 4 and 5 for each BIG-IQ in a HA configuration.

1. At the top of the screen, click System.
2. On the left, click USER MANAGEMENT > Users .
3. Click the Add button.
4. From the Auth Provider list, select LDAP.
5. In the User Name field, type the user name for this new user.
6. In the Full Name field, type a name to identify this user.
   The full name can contain a combination of symbols, letters, numbers and spaces.
7. In the Password and Confirm Password fields, type the password for this new locally-authenticated user.
   You can change the password any time.
8. From the Available list, select each user role you want to associate it with this user, and move it to the Selected list.
   Important: Be sure to let your users know that their access to certain parts of the BIG-IQ user interface depends on which role they are assigned.
9. From the Available list, select each user role you want to associate it with this user, and move it to the Selected list.
   Important: Be sure to let your users know that their access to certain parts of the BIG-IQ user interface depends on which role they are assigned.
10. Click the Save & Close button at the bottom of the screen.

1. At the top of the screen, click System.
2. At the left, click USER MANAGEMENT > User Groups .
   The User Groups screen opens.
3. Click the Add button.
4. In the Name field, type a name for this new user group.
5. From the Auth Provider list, select RADIUS.
6. In the Key and Value fields, type the properties for your RADIUS server.
7. From the User Roles list, select the user role you want to associate with this user.
   You aren't required to associate a user role at this point; you can do that later. If you want to add another user role, click +.
8. Click the Save & Close button at the bottom of the screen.