Hirschmann GREYHOUND GRS1020, Reference Manual

Page: 73 / 619

Device Security
[ Device Security > Authentication List ]
72
RM GUI GRS
Release 8.0 09/2019
Possible values:

local (default setting)
The device authenticates the users by using the local user management. See the Device
Security > User Management dialog.
You cannot assign this value to the authentication list defaultDot1x8021AuthList .

radius
The device authenticates the users with a RADIUS server in the network. You specify the
RADIUS server in the
Network Security > RADIUS > Authentication Server
dialog.

reject
The device accepts or rejects the authentication depending on which policy you try first. The
following list contains authentication scenarios:
– If the first policy in the authentication list is local and the device accepts the credentials of
the user, then it logs the user in without attempting the other polices.
– If the first policy in the authentication list is local and the device denies the credentials of
the user, then it attempts to log the user in using the other polices in the order specified.
– If the first policy in the authentication list is radius and the device rejects a login, then the
login is immediately rejected without attempting to login the user using another policy.
If there is no response from the RADIUS server, then the device attempts to authenticate the
user with the next policy.
– If the first policy in the authentication list is reject , then the devices immediately rejects the
user login without attempting another policy.
– Verify that the authentication list defaultV24AuthList contains at least one policy different
from reject .

ias
The device authenticates the end devices logging in via 802.1X with the integrated
authentication server (IAS). The integrated authentication server manages the log in data in a
separate database. See the
Network Security > 802.1X Port Authentication > Integrated Authentication
Server
dialog.
You can only assign this value to the authentication list defaultDot1x8021AuthList .
Dedicated applications
Displays the dedicated applications. When users access the device with the relevant application,
the device uses the specified policies for the authentication.
To allocate another application to the list or remove the allocation, click the button and then the
Allocate applications item. The device lets you assign each application to exactly one list.
Active
Activates/deactivates the list.
Possible values:

marked
The list is activated. The device uses the policies in this list when users access the device with
the relevant application.

unmarked
(default setting)
The list is deactivated.