GE MDS iNET 900, Reference Manual

Page: 93 / 188

05-2806A01, Rev. J iNET Series Reference Manual 83
2.7.4 RADIUS Configuration
Invisible place holder
Figure 2-46. RADIUS Configuration Menu
•
Server IP Address
—Used to set/display address of the Server
where the RADIUS application resides.
•
Server IP port
—1812 is the standard port for authentication (RFC
2865, June 2000), but this setting may be changed if necessary
to any number between 1 and 65535. [
1-65535; 1812
]
•
Shared Secret
—User authentication and Device authentication
require a common shared secret to complete a RADIUS trans-
action. This entry must match the string used to configure the
appropriate files on the RADIUS Server.
•
User Auth Mode
—Should be set to PAP or CHAP depending on
the configuration of the server.
NOTE:
CHAP is more secure than PAP. PAP may display the login
password in log files at the RADIUS Server while CHAP will
encrypt the login password.
NOTE: The security password may not exceed 40 characters in length.
2.7.5 Certificate Management
(Remote transceivers only)
Use Certificate generation software to generate certificate files and then
install these files into each Remote unit via TFTP. The certificate files
must be in DER format. The Common Name (CN) field in the public
certificate file must match the serial number of the unit it will be
installed in.