Table 2. Allowable authentication modes.
The gateway can be configured to communicate with two RADIUS servers. When the primary RA-
DIUS server fails to respond, the gateway will try to communicate with the secondary RADIUS
server. You can specify the length of timeout and the number of retries before communicating with
the secondary RADIUS server after failing to communicate with the primary RADIUS server.
The gateway and its RADIUS server(s) share a secret key so that they can authenticate each other. In
addition to its IP address, the gateway can identify itself by an NAS (Network Access Server) identi-
fier. Each gateway must have a
unique
NAS identifier.
3.6.2.2. Robustness
Fig. 88. RADIUS robustness settings.
The gateway can be configured to notify the RADIUS server after it reboots. The RADIUS server can
make use of the notification to clean up user authentication session records in the event that the gate-
way reboots unexpectedly due to abnormal operation.
Select the
Notify RADIUS server after reboot
check box to enable this capability, and then specify
the name of the
pseudo user
(default to “reboot”) for this operation in the
Reboot user name
text box.
3.6.3. Authentication Session Control
Fig. 89. Authentication session control settings.
Authentication session control settings are for controlling the lifetimes of user authentication sessions.
The
Idle timeout
setting specifies how long a user can be idle without generating any traffic before
being terminated. The
Session timeout
setting specifies the maximum session lifetime.
In addition, the gateway provides a mechanism for detecting whether a user has left unexpectedly by
62
Summary of Contents for IWE1200A-G
Page 1: ...USER S MANUAL...
Page 14: ...7...
Page 72: ...Fig 95 Advertisement links settings Fig 96 Advertisement links in action 65...
