GE MDS ORBIT ECR User Manual

MDS 05-6632A01, Rev. F MDS Orbit MCR/ECR Technical Manual 169
Clicking on the event Id number provides detailed information regarding record. In the following example
the user logged in the web from IP4 address 192.168.1.10, on port 49656 as user admin:
To do similar operations from the CLI in operational mode, follow the example below to see the history
of login attempts by reviewing the event log:
> show logging event-log event-type web_login
logging event-log 62625
time-stamp 2011-12-21T01:18:08.985996+00:00
priority notice
event-type web_login
status success
message “user_name oper, “
logging event-log 62627
time-stamp 2011-12-21T01:23:00.288046+00:00
priority notice
event-type web_login
status failure
message “msg noauth, user_name admin, “
RADIUS User Management
3.7.4
Understanding
User accounts can be centrally managed with a RADIUS server. RADIUS accounts can be mapped to one
of the three user roles.
If the RADIUS server is not accessible, users may use the local username/password to “fall back” to local
authentication if the unit is configured to do so. Many RADIUS servers do not respond to an invalid login
attempt. To the unit, this appears the same as if the server is not there. The consequence of this behavior
is that after three (default setting) failed login attempts, the authentication will take place against the local
user/password database if local fallback is enabled. Refer to the section on “Local User Management” for
configuring the authentication order.
If more than one RADIUS server is configured, then the unit will attempt each RADIUS server in the
order that they appear in the configuration until a successful response is received. A RADIUS server must
be configured to provide the user’s authentication group in its authentication reply via a GE MDS vendor
attribute.
This can be configured in FreeRADIUS (an open source RADIUS server) by creating a dictionary file
(placed usually in C:/FreeRADIUS.net/share/freeradius) with the following information:
VENDOR GEMDS 4130
BEGIN-VENDOR GEMDS
ATTRIBUTE GEMDS-UserAuth-Group 1 integer
VALUE GEMDS-UserAuth-Group Operator 0
VALUE GEMDS-UserAuth-Group Technician 1
VALUE GEMDS-UserAuth-Group Administrator 2
END-VENDOR GEMDS

GE MDS ORBIT ECR Specifications

General

Brand	GE
Model	MDS ORBIT ECR
Category	Network Router
Language	English