LEGRAND Raritan PX3TS, User Manual

Page: 380 / 911

Chapter 7: Using the Web Interface
360
4. Click Upload. The selected files are installed.
5. To verify whether the certificate has been installed successfully, check the
data shown in the Active TLS Certificate section.
Setting Up External Authentication
Important: Raritan uses TLS instead of SSL 3.0 due to published security
vulnerabilities in SSL 3.0. Make sure your network infrastructure, such as
LDAP and mail services, uses TLS rather than SSL 3.0.
For security purposes, users attempting to log in to PX3TS must be
authenticated. PX3TS supports the following authentication mechanisms:
•
Local user database on the PX3TS
•
Lightweight Directory Access Protocol (LDAP)
•
Remote Access Dial-In User Service (Radius) protocol
By default, PX3TS is configured for local authentication. If you use this method,
you only need to create user accounts. See
Creating Users (on page 297).
If you prefer external authentication, you must provide PX3TS with information
about the external Authentication and Authorization (AA) server.
If both local and external authentication is needed, create user accounts on the
PX3TS in addition to providing the external AA server data.
When configured for external authentication, all PX3TS users must have an
account on the external AA server. Local-authentication-only users will have no
access to the PX3TS except for the admin, who always can access the PX3TS.
If the external authentication fails, an "Authentication failed" message is
displayed. Details regarding the authentication failure are available in the event
log. See
Viewing or Clearing the Local Event Log (on page 473).
Note that only users who have both the "Change Authentication Settings" and
"Change Security Settings" permissions can configure or modify the
authentication settings.
To enable external authentication:
1. Collect external AA server information. See Gathering LDAP/Radius
Information (on page 361).
2. Enter required data for external AA server(s) on the PX3TS. See Adding
LDAP/LDAPS Servers (on page 362) or Adding Radius Servers (on page
365).
▪
For illustrations, see LDAP Configuration Illustration (on page 777) or
RADIUS Configuration Illustration (on page 792).
3. If both the external and local authentication is needed, or you have to
return to the local authentication only, see
Managing External
Authentication Settings (on page 366).