CANOGA PERKINS 9145E NID Software Version 4.10 - Manual (Page 47)

System Configuration 9145E NID Software User’s Manual
RADIUS Client
35
20. The values of the numbers do not matter, just the relative values of the numbers (in this case
10 being less than 20). This is done to allow you to easily change the server priorities without
having to edit both entries. If you had configured the servers with 10 and 20, you could make the
server with 20 have higher priority simply by changing its priority to 5; no need to change the one
with 10.
1. RADIUS Client Mode Options: RADIUS then Local, Local then RADIUS, or None
2. RADIUS then Local When a user tries to log in, the username and password is passed to
the configured Primary RADIUS Server first for authentication. If there is no connectivity
to the Primary RADIUS Server, the RADIUS Client attempts to authenticate the login
request on the Secondary RADIUS Server. If there is no connectivity to the Secondary
RADIUS Server, the 9145E can then use the local database.
3. Local then RADIUS says that when a user tries to log in, the local user accounts
database is consulted to try to authenticate the user. If the user cannot be authenticated
by the local accounts database, then the RADIUS Server is consulted to authenticate the
user.
4. None says that the RADIUS server is never used and all user access is authenticated by
the local user accounts database.
5. RADIUS Server IP Address The IP address of the RADIUS server. If 0.0.0.0 then this
server configuration will not be used.
6. RADIUS Server Shared Secret 16-character secret shared by the RADIUS server and
the RADIUS client to encrypt sensitive RADIUS traffic on the wire. The value entered
here must match what is configured into the RADIUS server.
7. RADIUS Server Retries The number of attempts to authenticate a user using this
RADIUS server before giving up or using the alternate RADIUS server if configured. 0 -
10
8. RADIUS Server Timeout The time in seconds (1-30) before assuming that the RADIUS
server did not reply and retrying a request if so configured.
9. RADIUS Server Priority The RADIUS server priority in relation to the alternate RADIUS
server if configured. The server with the lower priority will be consulted first to
authenticate a user. Servers with the same priority operate in a round-robin fashion
alternating requests to each server.
10. RADIUS Client Mode Determines from where the client can access the 9145E. Press
the Space bar to select RADIUS then Local, Local then RADIUS, or None.
11. RADIUS Server IP Address Provides the IP address of the RADIUS server. Use
Backspace to remove an existing IP address and type a new IP address.
12. RADIUS Server Shared Secret This is the security question the user must answer
before remote access is allowed. Press Backspace to remove an existing question and
type a new question. Questions are limited to 16 characters.
13. RADIUS Server Retries Specifies the number of times a user can enter the wrong
Shared Secret response before they are locked out of the system. Enter a value between
0 and 10.
14. RADIUS Server Timeout Specifies the length of time, in seconds, the server will wait for
a response before it times out. Enter a value between 1 and 30.