Raritan PX3-1000 series, User Manual

Page: 280 / 744

Chapter 6: Using the Web Interface
258
For security purposes, users attempting to log in to the PX3 must be
authenticated. The PX3 supports the following authentication
mechanisms:

Local user database on the PX3

Lightweight Directory Access Protocol (LDAP)

Remote Access Dial-In User Service (Radius) protocol
By default, the PX3 is configured for local authentication. If you stay with
this method, you only need to create user accounts. See
Creating Users
(on page 208).
If you prefer external authentication, you must provide the PX3 with
information about the external Authentication and Authorization (AA)
server.
If both local and external authentication is needed, create user accounts
on the PX3 in addition to providing the external AA server data.
When configured for external authentication, all PX3 users must have an
account on the external AA server. Local-authentication-only users will
have no access to the PX3 except for the admin, who always can access
the PX3.
If the external authentication fails, an "Authentication failed" message is
displayed. Details regarding the authentication failure are available in
the event log. See
Viewing or Clearing the Local Event Log
(on page
339).
Note that only users who have both the "Change Authentication Settings"
and "Change Security Settings" permissions can configure or modify the
authentication settings.
To enable external authentication:
1. Collect external AA server information. See Gathering LDAP/Radius
Information
(on page 259).
2. Enter required data for external AA server(s) on the PX3. See Adding
LDAP/LDAPS Servers
(on page 260) or
Adding Radius Servers
(on
page 263).

For illustrations, see LDAP Configuration Illustration (on page
621) or
Radius Configuration Illustration
(on page 634).
3. If both the external and local authentication is needed, or you have to
return to the local authentication only, see
Managing External
Authentication Settings
(on page 265).