LEGRAND 1U, Руководство пользователя

Страница: 479 / 543

This section provides illustrations for configuring RADIUS authentication. One illustration is based on the
Microsoft
®
Network Policy Server (NPS), and the other is based on a FreeRADIUS server.
The following steps are required for any RADIUS authentication:
1. Configure RADIUS authentication on the Legrand PDU. See
Adding Radius Servers
(on page 192).
2. Configure roles on the Legrand PDU. See
Creating Roles
(on page 150).
3. Configure Legrand PDU user credentials and roles on your RADIUS server.
 To configure using standard attributes, see
Standard Attributes
(on page 478).
 To configure using vendor-specific attributes, see
Vendor-Specific Attributes
(on page 491).
Note that we assume that the NPS is running on a Windows 2008 system in the NPS illustrations.
In This Chapter
Standard Attributes ............................................................................... 478
Vendor-Specific Attributes .................................................................... 491
AD-Related Configuration..................................................................... 502
Standard Attributes
The RADIUS standard attribute "Filter-ID" is used to convey the group membership, that is, roles.

If a user has multiple roles, configure multiple standard attributes for this user.

The syntax of a standard attribute is:
Raritan:G{role-name}
For configuration on NPS, see
NPS Standard Attribute Illustration
(on page 478).
For configuration on FreeRADIUS, see
FreeRADIUS Standard Attribute Illustration
(on page 491).
NPS Standard Attribute Illustration
To configure Windows 2008 NPS with the
standard attribute
, you must:
a. Add your Legrand PDU to NPS. See
Step A: Add Your Legrand PDU as a RADIUS Client
(on page
479).
b. On the NPS, configure Connection Request Policies and the standard attribute. See
Step B: Configure
Connection Policies and Standard Attributes
(on page 482).
Some configuration associated with Microsoft Active Directory (AD) is also required for RADIUS
authentication. See
AD-Related Configuration
(on page 502).
RADIUS Configuration
Illustration