3Com VCX V7111, User Manual

Page: 340 / 464

340
3Com
®
VCX V7111 VoIP Gateway User Guide
Configuring RADIUS Support
For information on the RADIUS parameters, see Table 64 .
To configure RADIUS support on the gateway using the Embedded Web Server:
1
Access the Embedded Web Server (see Accessing the Embedded Web Server ).
2
Open the General Security Settings screen ( Advanced Configuration menu > Security
Settings > General Security Settings option); the General Security Settings screen is
displayed.
3
Under section General RADIUS Settings, in the field Enable RADIUS Access Control,
select Enable; the RADIUS application is enabled.
4
In the field Use RADIUS for Web / Telnet Login, select Enable; RADIUS authentication is
enabled for Web and Telnet login.
5
Enter the RADIUS server IP address, port number and shared secret in the relevant
fields.
6
Under section RADIUS Authentication Settings, in the field Device Behavior Upon
RADIUS Timeout, select the gateways operation if a response is not received from the
RADIUS server after the 5 seconds timeout expires:
ƒ Deny Access – the gateway denies access to the Web and Telnet embedded
servers.
ƒ Verify Access Locally – the gateway checks the local username and password.
7
In the field Local RADIUS Password Cache Timeout, enter a time (in seconds); when this
time expires, the username and password verified by the RADIUS server becomes
invalid and a username and password must be re-validated with the RADIUS server.
8
In the field Local RADIUS Password Cache Mode, select the gateways mode of
operation regarding the above-mentioned Local RADIUS Password Cache Timer option:
ƒ Reset Timer Upon Access – upon each access to a Web screen, the timer resets
(reverts to the initial value configured in the previous step).
ƒ Absolute Expiry Timer - when you access a Web screen, the timer does not reset but
rather continues decreasing.
9
In the field RADIUS VSA Vendor ID, enter the vendor ID you configured in the RADIUS
server:
10
When using the Web access-level mechanism, perform one of the following options:
ƒ When RADIUS responses include the access level attribute:
In the field RADIUS VSA Access Level Attribute, enter the code that indicates the
access level attribute in the Vendor Specific Attributes (VSA) section of the received
RADIUS packet.
ƒ When RADIUS responses do not include the access level attribute:
In the field Default Access Level, enter the default access level that is applied to all
users authenticated by the RADIUS server.