User's Manual 540 Document #: LTRT-68822
Mediant 2000
Parameter Description
Web: RADIUS
Authentication Server IP
Address
EMS: RADIUS Auth
Server IP
[RADIUSAuthServerIP]
Defines the IP address of the RADIUS authentication server.
Note: For this parameter to take effect, a device reset is required.
Web: RADIUS
Authentication Server Port
EMS: RADIUS Auth
Server Port
[RADIUSAuthPort]
Defines the port of the RADIUS Authentication Server.
Note: For this parameter to take effect, a device reset is required.
Web: RADIUS Shared
Secret
EMS: RADIUS Auth
Server Secret
[SharedSecret]
Defines the 'Secret' used to authenticate the device to the RADIUS
server. This should be a cryptically strong password.
RADIUS Authentication Parameters
Web: Default Access
Level
[DefaultAccessLevel]
Defines the default access level for the device when the RADIUS
(authentication) response doesn't include an access level attribute.
The valid range is 0 to 255. The default is 200 (i.e., Security
Administrator).
Web: Device Behavior
Upon RADIUS Timeout
[BehaviorUponRadiusTi
meout]
Defines the device's response upon a RADIUS timeout.
ï‚§ [0] Deny Access = Denies access.
ï‚§ [1] Verify Access Locally = (Default) Checks password locally.
Web: Local RADIUS
Password Cache Mode
[RadiusLocalCacheMod
e]
Determines the device's mode of operation regarding the timer
(configured by the parameter RadiusLocalCacheTimeout) that
determines the validity of the user name and password (verified by the
RADIUS server).
ï‚§ [0] Absolute Expiry Timer = When you access a Web page, the
timeout doesn't reset, instead it continues decreasing.
ï‚§ [1] Reset Timer Upon Access = (Default) Upon each access to a
Web page, the timeout always resets (reverts to the initial value
configured by RadiusLocalCacheTimeout).
Web: Local RADIUS
Password Cache Timeout
[RadiusLocalCacheTime
out]
Defines the time (in seconds) the locally stored user name and
password (verified by the RADIUS server) are valid. When this time
expires, the user name and password become invalid and a must be re-
verified with the RADIUS server.
The valid range is 1 to 0xFFFFFF. The default is 300 (5 minutes).
ï‚§ [-1] = Never expires.
ï‚§ [0] = Each request requires RADIUS authentication.
Web: RADIUS VSA
Vendor ID
[RadiusVSAVendorID]
Defines the vendor ID that the device accepts when parsing a RADIUS
response packet.
The valid range is 0 to 0xFFFFFFFF. The default is 5003.
Web: RADIUS VSA
Access Level Attribute
[RadiusVSAAccessAttri
bute]
Defines the code that indicates the access level attribute in the Vendor
Specific Attributes (VSA) section of the received RADIUS packet.
The valid range is 0 to 255. The default is 35.