Comtech EF Data CDM-570AL - RADIUS Operation and Configuration

CDM-570A/570AL Satellite Modem with Optional Packet Processor
Revision 5
RADIUS Client I–4 MN-CDM570A
I.4 RADIUS Operation and Configuration
RADIUS is available only when you configure the CDM-570A/570AL for IP or IP-ACM operating
mode. Enabling and disabling of RADIUS is possible only through:
• The CDM-570A/570AL front panel;
• The CDM-570A/570AL HTTP (Web Server) Interface Admin | Access page;
• Issuance of Telnet remote commands.
With RADIUS enabled, any login attempt through the HTTP, Telnet, or Telnet CLI interfaces
results in the modem first contacting the RADIUS Client Server for authentication and
authorization before granting remote user access. Comtech EF Data provides three levels of user
access/login – Admin, Read/Write, and Read Only. Access to operations is controlled as follows:
User Access Login Level
Access Restriction(s)
Admin User (system*)
Full read/write access to all remote commands and queries via Telnet, Telnet CLI
(when unit is equipped with the Optional IP Packet Processor), and web pages
(including RADIUS configuration and control using the Admin | Access web page),
Read/Write User
• No Access to Admin- or IP Packet Processor-related Telnet remote
commands and queries, Telnet CLI, and web pages.
• Full read/write access to all modem configuration and monitoring web pages
(except Admin).
Read-Only User
• No Access to Admin or IP Packet Processor-related web pages, Telnet remote
commands and queries, or Telnet CLI.
• Read Only Access for all other web pages.
• RADIUS does not control user access to the CDM-570A/570AL Front Panel,
serial-based remote product management, or the SNMP user interface.
• *System administration under the Admin User login privilege does not
require RADIUS.
• Admin User credentials are stored in the modem, so login as Admin User
does not require the RADIUS Server connectivity.
• SNMP access can be disabled using System Admin access.