Raritan PX2-1000 SERIES, User Manual

Page: 204 / 648

Chapter 6: Using the Web Interface
185
Note: If the PX clock and the LDAP server clock are out of sync, the
installed TLS certificates, if any, may be considered expired. To ensure
proper synchronization, administrators should configure the PX and the
LDAP server to use the same NTP server(s).
Adding RADIUS Server Settings
To activate and use external RADIUS server authentication, enable
RADIUS authentication and enter the information you have gathered for
any RADIUS server.
To set up RADIUS authentication:
1. Choose Device Settings > Security > Authentication. The
Authentication Settings dialog appears.
2. Select the Radius radio button to enable the RADIUS authentication.
3. Click New to add a RADIUS AA server. The "Create new RADIUS
Server Configuration" dialog appears.
4. Type the IP address or host name of the RADIUS server in the IP
Address / Hostname field.
5. Select an authentication protocol in the "Type of RADIUS
Authentication" field. Your choices include:

PAP (Password Authentication Protocol)
 CHAP (Challenge Handshake Authentication Protocol)
CHAP is generally considered more secure because the user name
and password are encrypted, while in PAP they are transmitted in the
clear.
6. By default, the PX uses the standard RADIUS port 1812
(authentication) and 1813 (accounting). If you prefer to use
non-standard ports, change the ports.
7. Type the timeout period in seconds in the Timeout field. This sets the
maximum amount of time to establish contact with the RADIUS
server before timing out. Default is 1 second.
8. Type the number of retries permitted in the Retries field. Default is 3.
9. Type the shared secret in the Shared Secret and Confirm Shared
Secret fields. The shared secret is necessary to protect
communication with the RADIUS server.
10. To verify if the authentication configuration is set correctly, you may
click Test Connection to check whether the PX can connect to the
remote authentication server successfully.
Tip: You can also do this by using the Test Connection button in the
Authentication Settings dialog.