Atop EH9711 Series, User Manual

Page: 84 / 223

Industrial Managed
Ethernet Switch – EH9711
User Manual
Page 84 of 223
Label Description Factory
Default
Change Secret Key
Specify to change the secret key or not. When "Yes" is selected for the option,
you can change the secret key - up to 63 characters long - shared between the
RADIUS server and the switch. No
NAS-IP-Address
The IPv4 address to be used as attribute 4 in RADIUS Access-Request packets. If
this field is left blank, the IP address of the outgoing interface is used. Null
NAS-IPv6-Address
The IPv6 address to be used as attribute 95 in RADIUS Access-Request packets.
If this field is left blank, the IP address of the outgoing interface is used. Null
NAS-Identifier
The identifier - up to 253 characters long - to be used as attribute 32 in RADIUS
Access-Request packets. If this field is left blank, the NAS-Identifier is not
included in the packet. Null
Server Configuration
Delete
To delete a RADIUS server entry, check this box. The entry will be deleted
during the next Save.
Hostname
The IPv4/IPv6 address or hostname of the RADIUS server. Null
Auth Port
The UDP port to use on the RADIUS server for authentication. Set to 0 to disable
authentication.
1812
Acct Port
The UDP port to use on the RADIUS server for accounting. Set to 0 to disable
accounting.
1813
Timeout
This optional setting overrides the global timeout value. Leaving it blank will use
the global timeout value. Null
Retransmit
This optional setting overrides the global retransmit value. Leaving it blank will
use the global retransmit value. Null
Change Secret Key
Specify to change the secret key or not. When the checkbox is checked, you can
change the setting overrides the global key. Leaving it blank will use the global
key. Null
After clicking on the Add New Server button to add a new RADIUS server, an empty row is added to the table, and the
RADIUS server can be configured as needed. Up to 5 servers are supported. The Delete button can be used to undo the addition
of the new server. Click Save button to save changes. Click Reset button to undo any changes made locally and revert to
previously saved values.
2.5.3.2
is an acronym for Terminal Access Controller Access Control System Plus. It is a networking protocol which
provides access control for routers, network access servers and other networked computing devices via one or more centralized
servers. provides separate authentication, authorization and accounting services.
(Terminal Access Controller Access-Control System Plus) is a remote authentication protocol ,
which allows a remote access server to communicate with an authentication server to validate user access onto the network.
allows a client to accept a username and password, and pass a query to a authentication server.
Table
2.55 compares the differences between the RADIUS and .
Table 2.55 Comparison of Authentication Server Settings between RADIUS and
RADIUS
Transport Protocol UDP TCP
Authentication and
Authorization Separates AAA Combines authentication and
authorization
Multiprotocol
Support
No Yes, support AppleTalk Remote
Access (ARA) and NetBIOS
protocol
Confidentiality Only password is encrypted Entire packet is encrypted
Figure 2.68 shows the Server Configuration webpage. It consists of Global Configuration and Server Configuration
parts. Table 2.56 summarizes descriptions of parameters for setting up the Server.