AudioCodes Mediant 2000, Руководство пользователя

Страница: 112 / 418

SIP User's Manual 112 Document #: LTRT-68808
Mediant 2000
Parameter Description
RADIUS Shared Secret
[SharedSecret]
'Secret' used to authenticate the device to the RADIUS server.
Should be a cryptographically strong password.
General RADIUS Authentication
Default Access Level
[DefaultAccessLevel]
Defines the default access level for the device when the
RADIUS (authentication) response doesn't include an access
level attribute.
The valid range is 0 to 255. The default value is 200 (Security
Administrator').
Device Behavior Upon RADIUS
Timeout
[BehaviorUponRadiusTimeout]
Defines device behavior upon a RADIUS timeout.
ƒ
[0]
Deny Access = Denies access.
ƒ
[1]
Verify Access Locally = Checks password locally
(default).
Local RADIUS Password Cache
Mode
[RadiusLocalCacheMode]
Defines the device's mode of operation regarding the timer
(configured by the parameter RadiusLocalCacheTimeout) that
determines the validity of the user name and password
(verified by the RADIUS server).
ƒ
[0]
Absolute Expiry Timer = when you access a Web page,
the timeout doesn't reset but instead, continues decreasing.
ƒ
[1]
Reset Timer Upon Access = upon each access to a Web
page, the timeout always resets (reverts to the initial value
configured by RadiusLocalCacheTimeout).
Local RADIUS Password Cache
Timeout
[RadiusLocalCacheTimeout]
Defines the time (in seconds) the locally stored user name and
password (verified by the RADIUS server) are valid. When this
time expires, the user name and password become invalid and
a must be re-verified with the RADIUS server.
The valid range is 1 to 0xFFFFFF. The default value is 300 (5
minutes).
ƒ
[-1]
= Never expires.
ƒ
[0]
= Each request requires RADIUS authentication.
RADIUS VSA Vendor ID
[RadiusVSAVendorID]
Defines the vendor ID that the device accepts when parsing a
RADIUS response packet.
The valid range is 0 to 0xFFFFFFFF. The default value is
5003.
RADIUS VSA Access Level
Attribute
[RadiusVSAAccessAttribute]
Defines the code that indicates the access level attribute in the
Vendor Specific Attributes (VSA) section of the received
RADIUS packet.
The valid range is 0 to 255. The default value is 35.
EtherDiscover Setting
EtherDiscover Operation Mode N/A.
IPSec Setting
Enable IP Security
[EnableIPSec]
Enables / disables the Internet Protocol security (IPSec) on the
device.
ƒ
[0]
Disable = IPSec is disabled (default).
ƒ
[1]
Enable = IPSec is enabled.
Dead Peer Detection Mode
[IPSecDPDMode]
Enables the Dead Peer Detection (DPD) 'keep-alive'
mechanism (according to RFC 3706) to detect loss of peer
connectivity.