Raritan PXE, Руководство пользователя

Страница: 127 / 382

Chapter 6: Using the Web Interface
111
Adding RADIUS Server Settings
To activate and use external RADIUS server authentication, enable
RADIUS authentication and enter the information you have gathered for
any RADIUS server.
To set up RADIUS authentication:
1. Choose Device Settings > Security > Authentication. The
Authentication Settings dialog appears.
2. Select the Radius radio button to enable the RADIUS authentication.
3. Click New to add a RADIUS authentication server. The "Create new
RADIUS Server Configuration" dialog appears.
4. Type the IP address or host name of the RADIUS server in the IP
Address / Hostname field.
5. Select an authentication protocol in the "Type of RADIUS
Authentication" field. Your choices include:

PAP (Password Authentication Protocol)
 CHAP (Challenge Handshake Authentication Protocol)
CHAP is generally considered more secure because the user name
and password are encrypted, while in PAP they are transmitted in the
clear.
6. By default, the PXE uses the standard RADIUS port 1812
(authentication) and 1813 (accounting). If you prefer to use
non-standard ports, change the ports.
7. Type the timeout period in seconds in the Timeout field. This sets the
maximum amount of time to establish contact with the RADIUS
server before timing out. Default is 1 second.
8. Type the number of retries permitted in the Retries field. Default is 3.
9. Type the shared secret in the Shared Secret and Confirm Shared
Secret fields. The shared secret is necessary to protect
communication with the RADIUS server.
10. To verify if the authentication configuration is set correctly, you may
click Test Connection to check whether the PXE can connect to the
remote authentication server successfully.
Tip: You can also do this by using the Test Connection button in the
Authentication Settings dialog.
11. Click OK. The new RADIUS server is listed in the Authentication
Settings dialog.
12. To add additional RADIUS servers, repeat Steps 3 to 11.
13. Click OK. RADIUS authentication is now in place.