CANOGA PERKINS 9145EMP NID Software Version 4.0 User Manual

Page 51

Advertising
background image

9145EMP NID Software User’s Manual

System Configuration

RADIUS Client

36

server with 20 have higher priority simply by changing its priority to 5; no need to change the one
with 10. The RADIUS Client Configuration Client screen is shown in Figure 3-20.

1. RADIUS Client Mode Options: RADIUS then Local, Local then RADIUS, or None

2. RADIUS then Local When a user tries to log in, the username and password is passed to

the configured Primary RADIUS Server first for authentication. If there is no connectivity
to the Primary RADIUS Server, the RADIUS Client attempts to authenticate the login
request on the Secondary RADIUS Server. If there is no connectivity to the Secondary
RADIUS Server, the 9145EMP can then use the local database.

3. Local then RADIUS says that when a user tries to log in, the local user accounts

database is consulted to try to authenticate the user. If the user cannot be authenticated
by the local accounts database, then the RADIUS Server is consulted to authenticate the
user.

4. None says that the RADIUS server is never used and all user access is authenticated by

the local user accounts database.

5. RADIUS Server IP Address The IP address of the RADIUS server. If 0.0.0.0 then this

server configuration will not be used.

6. RADIUS Server Shared Secret 16-character secret shared by the RADIUS server and

the RADIUS client to encrypt sensitive RADIUS traffic on the wire. The value entered
here must match what is configured into the RADIUS server.

7. RADIUS Server Retries The number of attempts to authenticate a user using this

RADIUS server before giving up or using the alternate RADIUS server if configured. 0 -
10

8. RADIUS Server Timeout The time in seconds (1-30) before assuming that the RADIUS

server did not reply and retrying a request if so configured.

9. RADIUS Server Priority The RADIUS server priority in relation to the alternate RADIUS

server if configured. The server with the lower priority will be consulted first to
authenticate a user. Servers with the same priority operate in a round-robin fashion
alternating requests to each server.

Advertising