Lantronix EMG 8500, Руководство пользователя

Страница: 260 / 416

13: User Authentication
EMG™ Edge Management Gateway User Guide 260
2. Enter the following:
Enable RADIUS Displays selected if you enabled this method on the User Authentication page. If
you want to set up this authentication method but not enable it immediately, clear
the checkbox.
Note:
You can enable RADIUS here or on the first User Authentication page. If
you enable RADIUS here, it automatically displays at the end of the order of
precedence on the User Authentication page.
RADIUS Server #1 IPv4 or IPv6 address or hostname of the primary RADIUS server. This RADIUS
server may be a proxy for SecurID.
SecurID is a two-factor authentication method based on the user's SecurID token
and pin number. The SecurID token displays a string of digits called a token code
that changes once a minute (some tokens are set to change codes every 30
seconds).
Server #1 Port Number of the TCP port on the RADIUS server used for the RADIUS service. If you
do not specify an optional port, the EMG unit uses the default RADIUS port ( 1812 ).
Server #1 Secret Text that serves as a shared secret between a RADIUS client and the server (EMG
unit). The shared secret is used to encrypt a password sent between the client and
the server. May have up to 128 characters.
RADIUS Server #2 IPv4 or IPv6 address or host name of the secondary RADIUS server. This server
can be used as a SecurID proxy.
Server #2 Port Number of the TCP port on the RADIUS server used for the RADIUS service. If you
do not specify an optional port, the EMG uses the default RADIUS port ( 1812 ).
Server #2 Secret Text that serves as a shared secret between a RADIUS client and the server (EMG
unit). The shared secret is used to encrypt a password sent between the client and
the server. May have up to 128 characters.
Timeout The number of seconds (1-30) after which the connection attempt times out. The
default is 30 seconds.
Use VSA Select the check box to obtain remote user attributes (group/permissions and port
access) from the RADIUS server via the Vendor-Specific Attribute (VSA). For
details on the format of the VSA, see User Attributes & Permissions from LDAP
Schema or RADIUS VSA on page 262 .
Custom Menu If custom menus have been created, you can assign a default custom menu to
RADIUS users.
Escape Sequence A single character or a two-character sequence that causes the EMG unit to leave
direct (interactive) mode. (To leave listen mode, press any key.)
A suggested value is
Esc+A (escape key, then uppercase "A" performed quickly
but not simultaneously). You would specify this value as \ x1bA , which is
hexadecimal ( \ x ) character 27 ( 1B ) followed by an A .
This setting allows the user to terminate the
connect direct
command on the
command line interface when the endpoint of the command is
deviceport
,
tcp
, or
udp
.
See
Key Sequences on page 191
for notes on key sequence precedence and
behavior.
Break Sequence A series of 1-10 characters users can enter on the command line interface to send
a break signal to the external device. A suggested value is Esc+B (escape key,
then uppercase “B” performed quickly but not simultaneously). You would specify
this value as \ x1bB , which is hexadecimal ( \ x ) character 27 ( 1B ) followed by a B .