Raritan Dominion SX16, Инструкция по установке и эксплуатации, Страница: 69 / 162

C
HAPTER
4: C
ONSOLE
F
EATURES
55
RADIUS
Overview
The RADIUS configuration screen allows Administrators to modify information regarding RADIUS, or the Remote
Authentication Dial-In User Service, an access server authentication, authorization, and accounting protocol
developed by Livingston Enterprises, Inc. RADIUS protocol defines the communication between a RADIUS client
and a RADIUS server.
The RADIUS Configuration screen is used to set up the unit for use with a RADIUS protocol server. RADIUS
protocol is an Internet standard that provides user authentication, authorization, and accounting services for remote
access devices. Dominion SX can be configured as a RADIUS client. The unit will query the RADIUS server for
authentication and authorization information each time a user attempts to login to the unit.
The client is responsible for passing user information to designated RADIUS servers, and then acting on the
response that is returned. RADIUS servers are responsible for receiving user connection requests, authenticating the
user, and then returning all configuration information necessary for the client to deliver service to the user.
Figure 60 RADIUS Users Login Mechanism
RADIUS Authentication occurs when a user tries to log on to the RADIUS client. After prompting the user for login
name and password, the client checks to see if the user is already present in the local list. If not, the client sends this
information in an authentication request to the RADIUS server. The RADIUS server checks the validity of the
request, then checks its database of user names and passwords. If the name or password
are not valid, it sends a
rejection to the client, who in turn rejects the login. If the login name and password are valid, the RADIUS server
sends back a packet containing information about this user, and the client uses this information to decide what type
of service to supply for the user.
END OF AUTHENTICATION
LOGIN ATTEMPT
User Name and Password Entry
Authenticate with
RADIUS Server
Query for matching
name and password
Check if
RADIUS
is enabled
Dominion Database
Permissions Used
Dominion Database
Username and
Password Profiles
Match NOT Found
Login Entry (User Name and Password) does not
match any user profiles in the Dominion database
RADIUS NOT Enabled – Reject Login
END OF AUTHENTICATION
RADIUS Enabled –
Send information to RADIUS Server
Match Found – Accept Login
END OF AUTHENTICATION Match NOT Found – Reject Login
END OF AUTHENTICATION
Match Found
Login Entry (User Name and Password) exactly
matches a user profile in the Dominion database