CANOGA PERKINS 9145E NID Software Version 3.1 User Manual

Page 48

Advertising
background image

System Configuration

9145E NID Software User’s Manual

RADIUS Client

33

1. RADIUS Client Mode Options: RADIUS then Local, Local then RADIUS, or None

2. RADIUS then Local When a user tries to log in, the username and password is passed to

the configured Primary RADIUS Server first for authentication. If there is no connectivity
to the Primary RADIUS Server, the RADIUS Client attempts to authenticate the login
request on the Secondary RADIUS Server. If there is no connectivity to the Secondary
RADIUS Server, the 9145E-MP can then use the local database.

3. Local then RADIUS says that when a user tries to log in, the local user accounts

database is consulted to try to authenticate the user. If the user cannot be authenticated
by the local accounts database, then the RADIUS Server is consulted to authenticate the
user.

4. None says that the RADIUS server is never used and all user access is authenticated by

the local user accounts database.

5. RADIUS Server IP Address The IP address of the RADIUS server. If 0.0.0.0 then this

server configuration will not be used.

6. RADIUS Server Shared Secret 16-character secret shared by the RADIUS server and

the RADIUS client to encrypt sensitive RADIUS traffic on the wire. The value entered
here must match what is configured into the RADIUS server.

7. RADIUS Server Retries The number of attempts to authenticate a user using this

RADIUS server before giving up or using the alternate RADIUS server if configured. 0 -
10

8. RADIUS Server Timeout The time in seconds (1-30) before assuming that the RADIUS

server did not reply and retrying a request if so configured.

9. RADIUS Server Priority The RADIUS server priority in relation to the alternate RADIUS

server if configured. The server with the lower priority will be consulted first to
authenticate a user. Servers with the same priority operate in a round-robin fashion
alternating requests to each server.

10. RADIUS Client Mode Determines from where the client can access the 9145E-MP.

Press the Space bar to select RADIUS then Local, Local then RADIUS, or None.

11. RADIUS Server IP Address Provides the IP address of the RADIUS server. Use

Backspace

to remove an existing IP address and type a new IP address.

12. RADIUS Server Shared Secret This is the security question the user must answer

before remote access is allowed. Press Backspace to remove an existing question and
type a new question. Questions are limited to 16 characters.

13. RADIUS Server Retries Specifies the number of times a user can enter the wrong

Shared Secret response before they are locked out of the system. Enter a value between
0 and 10.

14. RADIUS Server Timeout Specifies the length of time, in seconds, the server will wait for

a response before it times out. Enter a value between 1 and 30.

Advertising