LEGRAND Raritan PX3-3000 Series, User Manual

Page: 359 / 977

Chapter 6: Using the Web Interface
338
For security purposes, users attempting to log in to PX3 must be
authenticated. PX3 supports the following authentication mechanisms:

Local user database on the PX3

Lightweight Directory Access Protocol (LDAP)

Remote Access Dial-In User Service (Radius) protocol
By default, PX3 is configured for local authentication. If you use this
method, you only need to create user accounts. See
Creating Users
(on
page 273).
If you prefer external authentication, you must provide PX3 with
information about the external Authentication and Authorization (AA)
server.
If both local and external authentication is needed, create user accounts
on the PX3 in addition to providing the external AA server data.
When configured for external authentication, all PX3 users must have an
account on the external AA server. Local-authentication-only users will
have no access to the PX3 except for the admin, who always can access
the PX3.
If the external authentication fails, an "Authentication failed" message is
displayed. Details regarding the authentication failure are available in
the event log. See
Viewing or Clearing the Local Event Log
(on page
458).
Note that only users who have both the "Change Authentication Settings"
and "Change Security Settings" permissions can configure or modify the
authentication settings.
To enable external authentication:
1. Collect external AA server information. See Gathering LDAP/Radius
Information
(on page 339).
2. Enter required data for external AA server(s) on the PX3. See Adding
LDAP/LDAPS Servers (on page 340) or Adding Radius Servers (on
page 343).

For illustrations, see LDAP Configuration Illustration (on page
837) or RADIUS Configuration Illustration (on page 852).
3. If both the external and local authentication is needed, or you have to
return to the local authentication only, see
Managing External
Authentication Settings (on page 344).