Juniper MEDIA FLOW MANAGER 2.0.2 - ADMINISTRATOR S GUIDE AND CLI, Руководство администратора

Страница: 51 / 156

System Config 51
Media Flow Manager Administrator’s Guide CHAPTER 3 Media Flow Manager Web-Based Interface
Authorization
Set authorization options. See Figure 28.
•
Map Order
— Determine how the remote user mapping behaves when authenticating
users via RADIUS or . If the authenticated user name is valid locally, no
mapping is performed. Options:
•
remote-first
— If a local-user mapping attribute is returned and is a valid local user
name, map the authenticated user to the local user specified in the attribute.
Otherwise, if the attribute is not present or not valid locally, use the user specified as
the
default-user
.
•
remote-only
— Only try to map a remote authenticated user if the authentication
server sends a local-user mapping attribute; otherwise, no further mapping is tried.
•
local-only
— All remote users are mapped to the user specified by
Map Default
User
. Any vendor attributes received by an authentication server are ignored.
Figure 28 System Config > AAA Page Detail
System Config > RADIUS
Configure RADIUS authentication. See
radius-server
for CLI details.
Default RADIUS Settings
View and change
Default RADIUS Settings
. See Figure 29 , next.
•
Key
—A shared secret text string. If no
key
is set, the user is prompted for the key.
•
Timeout
—Timeout for retransmitting a request to any RADIUS server. Range is
1-60
,
default is
3
.
•
Retransmit
—The number of times the client attempts to authenticate with any RADIUS
server. Range is
0-5
, default is
1
.
•
Login-lat-group
—The string that identifies the groups that the user is authorized to use
when Login-service is defined as LAT (local area transport). If none is set, the user is
prompted for the string.
Click
Apply
to complete operation;
Cancel
to revert to existing configuration. Click
Save
at the
top of the page to make changes persistent across reboots.