3Com VCX V7122, Руководство пользователя

Страница: 353 / 488

V7122 Gateway User Guide
353
ƒ When RADIUS responses don’t include the access level attribute:
In the field ‘Default Access Level’, enter the default access level that is applied to all
users authenticated by the RADIUS server.
11
In the field ‘Require Secured Web Connection (HTTPS)’, select ‘HTTPS only’.
It is important you use HTTPS (secure Web server) when connecting to the gateway
over an open network, since the password is transmitted in clear text. Similarly, for
Telnet, use SSL ‘TelnetServerEnable = 2 (see
Secured Telnet ).
12
To save the changes, see Saving Configuration .
13
Reset the gateway ( Resetting the Gateway ).
After reset, when accessing the Web or Telnet servers, use the username and password you
configured in the RADIUS database. The local system password is still active and can be
used when the RADIUS server is down.
To configure RADIUS support on the gateway using the ini file:
ƒ Add the following parameters to the ini file. For information on modifying the ini file, see
Modifying an ini File .
ƒ EnableRADIUS = 1
ƒ WebRADIUSLogin = 1
ƒ RADIUSAuthServerIP = IP address of RADIUS server
ƒ RADIUSAuthPort = port number of RADIUS server, usually 1812
ƒ SharedSecret = your shared secret '
ƒ HTTPSOnly = 1
ƒ BehaviorUponRadiusTimeout = 1
ƒ
RadiusLocalCacheMode = 1
ƒ RadiusLocalCacheTimeout = 300
ƒ RadiusVSAVendorID = your vendor’s ID
ƒ RadiusVSAAccessAttribute = code that indicates the access level attribute
ƒ DefaultAccessLevel = default access level (0 to 200)
Internal Firewall
The gateway accommodates an internal access list facility, allowing the security
administrator to define network traffic filtering rules. The access list provides the following
features:
ƒ Block traffic from known malicious sources
ƒ Only allow traffic from known friendly sources, and block all others