This use case demonstrates how to strengthen administrative access control for Anybus Defender by integrating it with a RADIUS authentication backend hosted on the Anybus Defender, enhanced with One-Time Password (OTP) using the Google Authenticator in your phone. The setup introduces multi-factor authentication (MFA), combining something the user knows (PIN/password) with something the user has (mobile OTP app).
Anybus Defender 4000, 6000 and 8000 series.
1. Install FreeRADIUS
Go to:
System → Package Manager → Available Packages
Install FreeRADIUS.
2. Configure FreeRADIUS Interfaces
Go to:
Services → FreeRADIUS → Interfaces → Add
Authentication Interface
Save.
Accounting Interface
Add a second interface with:
Save.
3. Add NAS Client
Go to:
Services → FreeRADIUS → NAS/Clients → Add
Save.
4. Add RADIUS Authentication Server as authentication server
Go to:
System → User Manager → Authentication Servers → Add
Save.
System → User Manager → Settings
5. Create a User with One Time Password (OTP)
Go to:
Services → User Manager → Users → Add
Save.
Hereafter the user must be created in the RADIUS server.
Services → FreeRADIUS → Users → Add
Open Google Authenticator on your phone and scan the QR code.
Scroll down and Save.
Note: OTP works for local users only. LDAP and similar backends are not supported for this method.
6. How to Log In
Username: Jim
Password = PIN + OTP code
Example:
NOTE:
Instead of Google Authenticator you can use Microsoft Authenticator or Apple's Password app, Just scan the QR code and enable the code generation. If you have multiple defender make sure you rename them by swiping on the code and editing the name in the authenticator app.
