How to enable radius two factor / two factor (2fa) identity authentication for Anheng fortress machine

Mingyu operation and maintenance audit and risk control system （ abbreviation ： Fortress machine or springboard machine ） It is based on the combination of years of operation and maintenance safety management theory and actual operation and maintenance experience of Anheng information , Combine various laws and regulations ( Such as grade protection 、 Graded protection 、 CBRC 、 Securities Regulatory 、PCI、 Enterprise internal control management 、SOX Saibans 、ISO27001 etc. )  Requirements for operation and maintenance management , And provide 4A( authentication Authentication、 account number Account、 to grant authorization Authorization、 Audit Audit) Unified safety management scheme .

In order to strengthen the login security of Fortress machine , Third parties are usually used Radius Two factors / Two factors （2FA） Identity Authentication , So as to ensure compliance and safety reinforcement ;

The reason for choosing Radius authentication , Because Radius It has a very wide range of compatibility and unique advantages , For details, please refer to an article written before 《Radius The working principle of the protocol and the application of two factor authentication 》, I won't elaborate here .

 

Next, let's see how to configure ？

Put the two factors of Zhongke henglun in advance / The two factor identity authentication server is configured , For device management 、 User management 、 Token management 、 Login authentication, etc , The configuration of Fortress machine is as follows ：

1、 To configure Radius The server

Mission --> Certification management --> Remote Authentication

2、 Open remote authentication for account

user --> User management --> Select a specific user --> Authentication mode -->Radius

3、 Login effect

In the password box, type “ Static password + One-time password ”, The static password is the static password set on the two factor platform .

At this time, there are two factors in Zhongke henglun / The two factor authentication server can see the login log , Record the login account in detail 、 The login time 、 Login results and other information ;

So far, Anheng fortress machine has been successfully enabled Radius, And double factors with Zhongke henglun / The two factor identity authentication server has completed docking ,