User authentication Remote Authentication Dial-In User Service(RADIUS)
IX20 User Guide
903
servers are unavailable. Additionally, users who are configured locally but are not configured on the
RADIUSserver are still able to log into the device. Authentication methodsare attempted in the order
they are listed until the first successful authentication result isreturned; therefore if you want to
ensure that users are authenticated first through the RADIUSserver, and only authenticated locally if
the RADIUSserver is unavailable or if the user is not defined on the RADIUSserver, then you should
list the RADIUSauthentication method prior to the Local users authentication method.
See User authentication methodsfor more information about authentication methods.
If the RADIUSservers are unavailable and the IX20 device falls back to local authentication, only users
defined locally on the device are able to log in. RADIUSusers cannot log in until the RADIUSservers
are brought back online.
Configure your IX20 device to use a RADIUS server
This section describeshow to configure a IX20 device to use a RADIUSserver for authentication and
authorization.
Required configuration items
n
Define the RADIUSserver IPaddress or domain name.
n
Define the RADIUSserver shared secret.
n
Add RADIUSasan authentication method for your IX20 device.
Additional configuration items
n
Whether other user authentication methodsshould be used in addition to the RADIUSserver,
or if the RADIUSserver should beconsidered the authoritativelogin method.
n
The RADIUSserver port. It isconfigured to 1812 by default.
n
Add additional RADIUSservers in case the first RADIUSserver isunavailable.
n
The server NASID. If left blank, the default value is used:
l
If you are accessthe IX20 device by using the WebUI, the default value is for NAS ID is
httpd.
l
If you are accessthe IX20 device by using ssh, the default value is sshd.
n
Time in secondsbefore the request to the server timesout. The default is3 secondsand the
maximum possible value is 60 seconds.
n
Enable additional debug messages from the RADIUSclient.
Web
1. Log into Digi Remote Manager, or log into the local Web UI asa user with full Admin access
rights.
2. Access the device configuration:
Remote Manager:
a. Locate your device as described in Use Digi Remote Manager to view and manage your
device.
b. Click the Device ID.
c. Click Settings.
d. Click to expand Config.
To Next Page
Loading...
Need help?
General