Raritan DOMINION SX -, Installation And Operation Manual

Page: 66 / 172

56 D
OMINION
SX I
NSTALLATION AND
O
PERATIONS
M
ANUAL
RADIUS
Overview
The RADIUS configuration screen allows Administrators to modify information regarding RADIUS, or the
Remote Authentication Dial-In User Service, an access server authentication, authorization, and accounting
protocol developed by Livingston Enterprises, Inc. RADIUS protocol defines the communication between
a RADIUS client and a RADIUS server.
The RADIUS Configuration screen is used to set up the unit for use with a RADIUS protocol server.
RADIUS protocol is an Internet standard that provides user authentication, authorization, and accounting
services for remote access devices. Dominion SX can be configured as a RADIUS client. The unit will
query the RADIUS server for authentication and authorization information each time a user attempts to
login to the unit.
The client is responsible for passing user information to designated RADIUS servers, and then acting on
the response that is returned. RADIUS servers are responsible for receiving user connection requests,
authenticating the user, and then returning all configuration information necessary for the client to deliver
service to the user.
Figure 59 RADIUS Users Login Mechanism
RADIUS Authentication occurs when a user tries to log on to the RADIUS client. After prompting the user
for login name and password, the client checks to see if the user is already present in the local list. If not,
the client sends this information in an authentication request to the RADIUS server. The RADIUS server
checks the validity of the request, then checks its database of user names and passwords. If the name or
password
are not valid, it sends a rejection to the client, who in turn rejects the login. If the login name and
password are valid, the RADIUS server sends back a packet containing information about this user, and the
client uses this information to decide what type of service to supply for the user.
END OF AUTHENTICATION
LOGIN ATTEMPT
User Name and Password Entry
Authenticate with
RADIUS Server
Query for matching
name and password
Check if
RADIUS
is enabled
Dominion Database
Permissions Used
Dominion Database
Username and
Password Profiles
Match NOT Found
Login Entry (User Name and Password) does not
match any user profiles in the Dominion database
RADIUS NOT Enabled – Reject Login
END OF AUTHENTICATION
RADIUS Enabled –
Send information to RADIUS Server
Match Found – Accept Login
END OF AUTHENTICATION Match NOT Found – Reject Login
END OF AUTHENTICATION
Match Found
Login Entry (User Name and Password) exactly
matches a user profile in the Dominion database