Raritan Dominion SX II, Руководство администратора

Страница: 104 / 272

Chapter 6: SX II Administration
97
The SX II then tests the LDAP configuration from the Authentication
Settings page. This is helpful due to the complexity sometimes
encountered when configuring the LDAP server and SX II for remote
authentication.
Once the test is completed, a message is displayed that lets you
know the test was successful or, if the test failed, a detailed error
message is displayed. It also can display group information retrieved
from remote LDAP server for the test user in case of success.
Enable RADIUS Authentication
Note: When configuring the RADIUS server, the Filter-ID format for the
users on the server should have the following format
"raritan:G{GroupOnSX}:D{DialbackNumber}".
You can use Remote Authentication Dial-In User Service (RADIUS) to
authenticate SX II users instead of local authentication.
RADIUS is an AAA (authentication, authorization, and accounting)
protocol for network access applications.
1. Click User Management > Authentication Settings to open the
Authentication Settings page.
2. Click the RADIUS radio button to enable the RADIUS section of the
page. The section expands. If it does not, click the section header to
expand it.
3. In the Primary Radius Server and Secondary Radius Server fields,
type the IP address of your primary and optional secondary remote
authentication servers, respectively.
4. In the Shared Secret fields, type the server secret used for
authentication.
The shared secret is a character string that must be known by both
the SX II and the RADIUS server to allow them to communicate
securely. It is essentially a password.
5. The Authentication Port default is port is 1812 but can be changed
as required.
6. The Accounting Port default port is 1813 but can be changed as
required.
7. The Timeout is recorded in seconds and default timeout is 1 second,
but can be changed as required.
8. The timeout is the length of time the SX II waits for a response from
the RADIUS server before sending another authentication request.
9. The default number of retries is 3 Retries.
This is the number of times the SX II will send an authentication
request to the RADIUS server.