Raritan EMX2-888, Руководство пользователя

Страница: 197 / 568

Chapter 6: Using the Web Interface
183
Note: If the EMX clock and the LDAP server clock are out of sync, the
installed TLS certificates, if any, may be considered expired. To ensure
proper synchronization, administrators should configure the EMX and the
LDAP server to use the same NTP server(s).
More Information about AD or RADIUS Configuration
For more information about the LDAP configuration using Microsoft
Active Directory, see
LDAP Configuration Illustration
(on page 484).
For more information on RADIUS configuration, see
RADIUS
Configuration Illustration
(on page 501).
Adding RADIUS Server Settings
To activate and use external RADIUS server authentication, enable
RADIUS authentication and enter the information you have gathered for
any RADIUS server.
To set up RADIUS authentication:
1. Choose Device Settings > Security > Authentication. The
Authentication Settings dialog appears.
2. Select the Radius radio button to enable the RADIUS authentication.
3. Click New to add a RADIUS AA server. The "Create new RADIUS
Server Configuration" dialog appears.
4. Type the IP address or host name of the RADIUS server in the IP
Address / Hostname field.
5. Select an authentication protocol in the "Type of RADIUS
Authentication" field. Your choices include:
 PAP (Password Authentication Protocol)
 CHAP (Challenge Handshake Authentication Protocol)
CHAP is generally considered more secure because the user name
and password are encrypted, while in PAP they are transmitted in the
clear.
6. By default, the EMX uses the standard RADIUS port 1812
(authentication) and 1813 (accounting). If you prefer to use
non-standard ports, change the ports.
7. Type the timeout period in seconds in the Timeout field. This sets the
maximum amount of time to establish contact with the RADIUS
server before timing out. Default is 1 second.
8. Type the number of retries permitted in the Retries field. Default is 3.
9. Type the shared secret in the Shared Secret and Confirm Shared
Secret fields. The shared secret is necessary to protect
communication with the RADIUS server.