RUGGEDCOM ROS
User Guide
Chapter 4
System Administration
Managing an Authentication Server
115
ROS also has the ability to accept partial configuration updates. For example, to update only the parameters for
Ethernet port 1 and leave all other parameters unchanged, transfer a file containing only the following lines to the
device:
# Port Parameters
ethPortCfg
Port,Name,Media,State,AutoN,Speed,Dupx,FlowCtrl,LFI,Alarm,
1,Port 1,100TX,Enabled,On,Auto,Auto,Off,Off,On,
Section 4.6
Managing an Authentication Server
The following sections describe how to setup and configure an authentication server:
•
Section 4.6.1, “Managing RADIUS Authentication”
•
Section 4.6.2, “Managing Authentication”
Section 4.6.1
Managing RADIUS Authentication
ROS can be configured to act as a RADIUS client and forward user credentials to a RADIUS (Remote
Authentication Dial In User Service) server for remote authentication and authorization.
RADIUS is a UDP-based protocol used for carrying authentication, authorization and configuration information
between a Network Access Server (NAS) that desires to authenticate its links and a shared authentication server.
It provides centralized authentication and authorization for network access.
RADIUS is also widely used in conjunction with the IEEE 802.1X standard for port security using the Extensible
Authentication Protocol (EAP).
NOTE
For more information about the RADIUS protocol, refer to
RFC 2865
.
For more information about the Extensible Authentication Protocol (EAP), refer to
RFC 3748
.
IMPORTANT!
RADIUS messages are sent as UDP messages. The switch and the RADIUS server must use the
same authentication and encryption key.
IMPORTANT!
ROS supports both Protected Extensible Authentication Protocol (PEAP) and EAP-MD5. PEAP is more
secure and is recommended if available in the supplicant.
In a RADIUS access request, the following attributes and values are typically sent by the RADIUS client to the
RADIUS server:
Attribute
Value
User-Name
{ Guest, Operator, Admin }
User-Password
{ password }
Service-Type
1
