HP E-MSM310, Руководство по управлению и настройке

Страница: 30 / 210

Management
Management tool
2-4
 RADIUS server: Using a RADIUS server enables you to have multiple accounts, each
with a unique login name and password. Identify accounts using the vendor specific
attribute web-administrative-role . See Configuring administrative accounts on a
RADIUS server on page 6-11 . To use a RADIUS server, you must define a RADIUS profile
on the Authentication > RADIUS profiles page.
If both options are enabled, the local account is always checked first.
Authenticating administrative credentials using an external RADIUS
server
Configure RADIUS authentication as follows:
1. Define an account for the manager or operator on the RADIUS server. Specify the
appropriate value for the vendor specific attribute web-administrative-role. See
Configuring administrative accounts on a RADIUS server on page 6-11 .
2. On the AP, create a RADIUS profile that will connect the AP to the RADIUS server. See
Configuring a RADIUS client profile on the AP on page 6-2 .
3. Under Administrative user authentication , enable RADIUS and select the RADIUS
profile you created. In this example, the profile is called RAD1 .
4. Test the RADIUS account to make sure it is working before you save your changes.
Specify the appropriate username and password and select Test .
(As a backup measure you can choose to enable Local. This will allow you to log in using
the local account if the connection to the RADIUS server is unavailable.)
Manager and Operator accounts
Two types of administrative accounts are defined: manager and operator.
 The manager account provides full management tool rights.
 The operator account provides read-only rights plus the ability to disconnect wireless
clients and perform troubleshooting.
Only one administrator (manager or operator) can be logged in at any given time. Options are
provided to control what happens when an administrator attempts to log in while another
administrator (or the same administrator in a different session) in already logged in. In every
case, the manager’s rights supersede those of an operator.