Version 6.6 539 Mediant 2000
User's Manual 45. Configuration Parameters Reference
45.5 RADIUS Parameters
The RADIUS parameters are described in the table below. For supported RADIUS
attributes, see 'RADIUS Accounting CDR Attributes' on page 467.
RADIUS Parameters
Parameter Description
RADIUS Accounting Parameters
Web: Enable RADIUS
Access Control
[EnableRADIUS]
Enables the RADIUS application.
ï‚§ [0] Disable (Default)
ï‚§ [1] Enable
Note: For this parameter to take effect, a device reset is required.
Web: Accounting Server
IP Address
[RADIUSAccServerIP]
Defines the IP address of the RADIUS accounting server.
Web: Accounting Port
[RADIUSAccPort]
Defines the port of the RADIUS accounting server.
The default is 1646.
Web/EMS: RADIUS
Accounting Type
[RADIUSAccountingTyp
e]
Determines when the RADIUS accounting messages are sent to the
RADIUS accounting server.
ï‚§ [0] At Call Release = (Default) Sent at call release only.
ï‚§ [1] At Connect & Release = Sent at call connect and release.
ï‚§ [2] At Setup & Release = Sent at call setup and release.
Web: AAA Indications
EMS: Indications
[AAAIndications]
Determines the Authentication, Authorization and Accounting (AAA)
indications.
ï‚§ [0] None = (Default) No indications.
ï‚§ [3] Accounting Only = Only accounting indications are used.
General RADIUS Parameters
Web: Use RADIUS for
Web/Telnet Login
EMS: Web Use Radius
Login
[WebRADIUSLogin]
Enables RADIUS queries for Web and Telnet login authentication.
When enabled, logging into the device's Web and Telnet embedded
servers is done through a RADIUS server. The device communicates
with a user-defined RADIUS server and verifies the given username
and password against a remote database, in a secure manner.
ï‚§ [0] Disable (default)
ï‚§ [1] Enable
Notes:
ï‚§ For RADIUS login authentication to function, you also need to set
the following parameters:
EnableRADIUS = 1 (Enable)
WebAuthMode = 0 (Basic Mode)
ï‚§ RADIUS authentication requires HTTP basic authentication, where
the username and password are transmitted in clear text over the
network. Therefore, it's recommended to set the HTTPSOnly
parameter to 1 in order to force the use of HTTPS, since the
transport is encrypted.
ï‚§ If using RADIUS authentication to log into the CLI, only the primary
Web User Account, which has Security Administration access level,
can access the device's CLI (see 'Configuring Web User Accounts'