
GE Multilin
G30 Generator Protection System
G-1
APPENDIX G
G.1 RADIUS SERVER CONFIGURATION
G
APPENDIX G RADIUS SERVERG.1 RADIUS SERVER CONFIGURATION
G.1.1 RADIUS SERVER CONFIGURATION
The following procedure is an example of how to set up a simple RADIUS server. You install the RADIUS server software
on a separate computer. In this example, we use FreeRADIUS third-party software.
1.
Download and install
FreeRADIUS from www.freeradius.net
as the RADIUS server. This is a Windows 32-bit installa-
tion that is known to work. If you try another third-party tool and it does not work, use the FreeRADIUS software from
freeradius.net.
2.
Open the radius.conf file in the <Path_to_Radius>\etc\raddb folder, locate the "bind_address" field, and enter your
RADIUS server IP address. An example is
bind_address = 10.14.61.109
Text editor software that supports direct editing and saving of UNIX text encodings and line breaks, such as EditPad
Lite, is needed for this editing.
3.
In the users.conf file in the <Path_to_Radius>\etc\raddb folder, add the following text to configure a user "Tester" with
an Administrator role.
Tester User-Password == "testpw"
GE-PDC-USER-Role = Administrator,
4.
In the clients.conf file in the <Path_to_Radius>\etc\raddb folder, add the following text to define the UR as a RADIUS
client, where the client IP address is 10.0.0.2, the subnet mask is 255.255.255.0, the shared secret specified here is
also configured on the UR device for successful authentication, and the shortname is a short, optional alias that can be
used in place of the IP address.
client 10.0.0.2/24 {
secret = testing123
shortname = private-network-1
}
5.
In the <Path_to_Radius>\etc\raddb folder, create a file called dictionary.ge and add the following content.
# ##########################################################
# GE VSAs
############################################################
VENDOR GE 2910
# Management authorization
BEGIN-VENDOR GE
# Role ID
ATTRIBUTE GE-UR-Role 1 integer
# GE-UR-ROLE values
VALUE GE-UR-Role Administrator 1
VALUE GE-UR-Role Supervisor 2
VALUE GE-UR-Role Engineer 3
VALUE GE-UR-Role Operator 4
VALUE GE-UR-Role Observer 5
END-VENDOR GE
#############################################################
6.
In the dictionary file in the <Path_to_Radius>\etc\raddb folder, add the following line.
$INCLUDE dictionary.ge
For example, the file can look like the following:
$INCLUDE ../shareéfreeradius/dictionary
$INCLUDE dictionary.ge
7.
For the first start, run the RADIUS server in debug mode to ensure that there are no compiling errors.
Summary of Contents for G30
Page 10: ...x G30 Generator Protection System GE Multilin TABLE OF CONTENTS ...
Page 30: ...1 20 G30 Generator Protection System GE Multilin 1 5 USING THE RELAY 1 GETTING STARTED 1 ...
Page 414: ...5 274 G30 Generator Protection System GE Multilin 5 10 TESTING 5 SETTINGS 5 ...
Page 484: ...11 12 G30 Generator Protection System GE Multilin 11 6 DISPOSAL 11 MAINTENANCE 11 ...
Page 512: ...A 28 G30 Generator Protection System GE Multilin A 1 PARAMETER LISTS APPENDIX A A ...
Page 620: ...B 108 G30 Generator Protection System GE Multilin B 4 MEMORY MAPPING APPENDIX B B ...
Page 666: ...E 10 G30 Generator Protection System GE Multilin E 1 IEC 60870 5 104 APPENDIX E E ...
Page 678: ...F 12 G30 Generator Protection System GE Multilin F 2 DNP POINT LISTS APPENDIX F F ...