Comtech EF Data CDM-425, Installation And Operation Manual

Page: 733 / 744

CDM-425 Advanced Satellite Modem
Revision 0
Appendix O O–3 MN-CDM-425
O.3 RADIUS Client
Figure O-1. RADIUS Authentication Process
Figure O-1 shows the typical RADIUS connectivity with the CDM-425 Advanced Satellite Modem.
Remote monitor and control of the modem is accomplished with the User PC. The modem
connects to the RADIUS server for user credential authentication.
The authentication process, as shown here, permits use of the HTTP (Web Server) Interface for
remote M&C of the CDM-425 Advanced Satellite Modem. This basic messaging sequence is the
same for M&C access to the modem over the Telnet user interface:
Step Action
1 The User PC transmits the “HTTP GET” request.
2
Upon receiving the “HTTP GET” request, the CDM-425 Advanced Satellite Modem checks whether the user
has been authenticated. If not, the modem returns “HTTP 401 Unauthorized” message to the User PC.
3
The User PC transmits the login credentials to the CDM-425 Advanced Satellite Modem using the “HTTP
GET” message.
4 The CDM-425 Advanced Satellite Modem receives the login credentials and performs the following steps:
A. It validates the login credentials against the locally stored Admin credentials. If the credentials match,
the modem allows Read/Write access (including Admin configuration pages); it does not grant
RADIUS access.
B. If there is no match for the system user credentials, then the modem transmits the RADIUS: Access-
Request message to the Primary RADIUS Server.
C. If the Primary RADIUS Server is not available, then the modem transmits the RADIUS: Access-
Request message to the Secondary RADIUS Server.