3Com V6100, Руководство пользователя, Страница: 345 / 496

V6100 and V7122 User Guide
345
8 In the field ‘Local RADIUS Password Cache Mode’, select the gateway’s mode of
operation regarding the above-mentioned ‘Local RADIUS Password Cache Timer’
option:
a)
Reset Timer Upon Access – upon each access to a Web screen, the timer resets
(reverts to the initial value configured in the previous step).
b)
Absolute Expiry Timer - when you access a Web screen, the timer doesn’t reset but
rather continues decreasing.
9 In the field ‘RADIUS VSA Vendor ID’, enter the vendor ID you configured in the RADIUS
server:
10 When using the Web access-level mechanism, perform one of the following options:
a)
When RADIUS responses include the access level attribute:
In the field ‘RADIUS VSA Access Level Attribute’, enter the code that indicates the
access level attribute in the Vendor Specific Attributes (VSA) section of the received
RADIUS packet.
b)
When RADIUS responses don’t include the access level attribute:
In the field ‘Default Access Level’, enter the default access level that is applied to all
users authenticated by the RADIUS server.
11 In the field ‘Require Secured Web Connection (HTTPS)’, select ‘HTTPS only’.
It is important you use HTTPS (secure Web server) when connecting to the gateway
over an open network, since the password is transmitted in clear text. Similarly, for
Telnet, use SSL ‘TelnetServerEnable = 2 (see
Secured Telnet ).
12
To save the changes so they are available after a power fail, see Save Configuration .
13
Reset the gateway. Click the Reset Device button on the main menu bar; the Reset
screen is displayed. Click the button Reset .
After reset, when accessing the Web or Telnet servers, use the username and password you
configured in the RADIUS database. The local system password is still active and can be
used when the RADIUS server is down.
To configure RADIUS support on the gateway using the ini file:
Add the following parameters to the ini file. For information on modifying the ini file, see
Modifying an ini File .
1
EnableRADIUS = 1
2
WebRADIUSLogin = 1
3
RADIUSAuthServerIP = IP address of RADIUS server
4 RADIUSAuthPort = port number of RADIUS server, usually 1812
5 SharedSecret = your shared secret '
6 HTTPSOnly = 1