4IPNET HSG800, User Manual

Page: 72 / 108

User’s Manual
OWL800 / OWL2000 / HSG800
ENGLISH
© 2008 4IPNET, INC.
63
ƒ
Postfix : It is a string used by the system to distinguish which database/server will be used for authentication
when a user enters the user name to log in. For example, when the Postfix is configured as “radius1”,
user1@radius1 will tell the system to use this RADIUS server. A meaningful string will help administrators
manage the authentication. It is only allowed to use numbers (0 to 9), alphabets (a to z or A to Z), dash (-),
underline (_) and dot (.) with a maximum of 40 characters.
ƒ
Extensible Authentication Protocol : When enabled, the system can accept 802.1X authentication request
(EAP request) from 802.1X capable devices and relay the request to external RADIUS server. For more
information, please see Appendix B. 802.1X Support .
ƒ
802.1X Client Device Settings : When Extensible Authentication Protocol is enabled, by clicking on this
button, administrators can go to Roaming Out and 802.1X Client Device Settings page to further set up the
802.1X capable devices that are allowed to authenticate against the Local user database.
ƒ
Username Format to RADIUS Server : When ID Only is selected, only the username will be sent to the
external RADIUS server for authentication. On the other hand, when Complete option is selected, both the
username and the postfix will be sent to the RADIUS server.
ƒ
Primary RADIUS Server & Secondary RADIUS Server :
Host : Domain name or IP address of the external RADIUS server.
Authentication Port : Port number of the external RADIUS server for authentication.
Security Key : The Secret Key for RADIUS authentication.
Accounting Service : RADIUS accounting can be enabled or disabled.
Accounting Port : Port number of the external RADIUS server for accounting.
Authentication Protocol : The authentication protocol configurations of the system must match with the
configurations of the remote RADIUS server. PAP (Password Authentication Protocol) transmits password in
plain text without encryption. CHAP (Challenge Handshake Authentication Protocol) is a more secured
authentication protocol with hash encryption.