DSA-3110 Hotspot Edition – User Manual
RADIUS
This page is designed to configure the device operation with an external centralized database via the
RADIUS protocol.
Such a scheme is useful if there are several devices (objects) that work with single database of
users.
In addition, the system performs traffic accounting for the users of the RADIUS database via the
RADIUS protocol (RADIUS accounting).
The
radius
group serves for configuring the parameters of the external DB users (see the
Users and
Groups > Groups
page). This group is required only to specify the bandwidth for the group and for
users, so, there is no use creating local users in this group (such users are considered to be the users
of the local database).
Attention!
The data on the next time of authentication (username and password) check are
contained in the SESSION_TIMEOUT field of the RADIUS packet. For this reason, the
Account
length
parameter for the
radius
group users is useless (though available on the page).
Attention!
The device can operate in both internal (local) DB and external (located on the Radius
server) DB simultaneously. This feature provides the system with more flexibility and the
opportunity to work with both centralized users from different objects (in case of the network of
objects) and local users from the current object.
However, you must keep in mind that the authentication data of local users are kept in the device
(locally), and the authentication data of RADIUS users – on the RADIUS authentication server.
Picture 27. Configuring the device operation with the RADIUS server.
Page 28 of 61
