Raritan PX3-3000 series, User Manual

Page: 320 / 875

Chapter 6: Using the Web Interface
296
For security purposes, users attempting to log in to the PX3 must be
authenticated. The PX3 supports the following authentication
mechanisms:

Local user database on the PX3

Lightweight Directory Access Protocol (LDAP)

Remote Access Dial-In User Service (Radius) protocol
By default, the PX3 is configured for local authentication. If you stay with
this method, you only need to create user accounts. See
Creating Users
(on page 238).
If you prefer external authentication, you must provide the PX3 with
information about the external Authentication and Authorization (AA)
server.
If both local and external authentication is needed, create user accounts
on the PX3 in addition to providing the external AA server data.
When configured for external authentication, all PX3 users must have an
account on the external AA server. Local-authentication-only users will
have no access to the PX3 except for the admin, who always can access
the PX3.
If the external authentication fails, an "Authentication failed" message is
displayed. Details regarding the authentication failure are available in
the event log. See
Viewing or Clearing the Local Event Log
(on page
395).
Note that only users who have both the "Change Authentication Settings"
and "Change Security Settings" permissions can configure or modify the
authentication settings.
To enable external authentication:
1. Collect external AA server information. See Gathering LDAP/Radius
Information
(on page 297).
2. Enter required data for external AA server(s) on the PX3. See Adding
LDAP/LDAPS Servers
(on page 298) or
Adding Radius Servers
(on
page 301).

For illustrations, see LDAP Configuration Illustration (on page
739) or
Radius Configuration Illustration
(on page 752).
3. If both the external and local authentication is needed, or you have to
return to the local authentication only, see
Managing External
Authentication Settings
(on page 303).