Raritan Dominion KSX DKSX440, User Manual

Page: 65 / 94

C
HAPTER
4: A
DMINISTRATIVE
F
UNCTIONS
53
−
CHAP: Challenge Authentication Protocol (CHAP) will be used to encrypt and authenticate the user’s
password.
•
Server Secret : The RADIUS server and Dominion KSX, as a RADIUS client, share a common secret used to
encrypt the RADIUS protocol data. Enter the secret here. The keystrokes entered for the secret can be any
combination of keystrokes up to 128 characters in length.
−
Confirm Secret: Enter secret again for confirmation of keystrokes.
•
Primary Server IP: Enter the IP address of the primary RADIUS server. A primary server IP is required for
the RADIUS features to function.
•
Secondary Server IP: Optional. Enter the IP address of a secondary RADIUS server. If the primary server
becomes unavailable, Dominion KSX will redirect its RADIUS requests to this secondary or backup server.
•
Server UDP Port: Sets the ports used by the RADIUS server.
−
Standard 1812 & 1813 (default): Uses port 1812 for Authentication and port 1813 for Accounting. These
are the ports most often used by modern RADIUS systems.
−
Legacy Ports 1645 & 1646: Uses port 1645 for Authentication and port 1646 for Accounting. These ports
are most often used by older RADIUS systems.
−
Custom UDP Ports: Enables the administrator to enter specific port numbers for the RADIUS server.
Authentication Port: Enter port number used by RADIUS for Authentication.
Accounting Port: Enter the port number used by RADIUS for Accounting.
•
Enable RADIUS Accounting: Turns the RADIUS accounting function on or off.
−
NO (default): RADIUS accounting is operational. Log in and log out information for each user will be
recorded only in Dominion KSX’s built-in event log.
−
YES: RADIUS accounting is operational. Log in and log out information for each user will be recorded in
Dominion KSX’s built-in event log, and then Dominion KSX will send a RADIUS accounting message to
the RADIUS server.
Note: If RADIUS Authentication has been enabled, the choices previously made for Secret Server,
Confirm Secret, Primary Server IP, and Secondary Server IP will also accommodate RADIUS
Accounting. If these selections have not been made during a previous enabling of RADIUS
Authentication, they must now be selected for RADIUS Accounting.
Press < Ctrl+S > to save changes or < Esc > to cancel changes, and return to the Configuration Menu. Saved Radius
Configuration changes will not take effect until Dominion KSX is restarted.