More services
518
12.11
RADSEC
BAT54-Rail/F..
Release
7.54
06/08
U BAT as a RADIUS server
If a BAT operates as a RADIUS server, the RADSEC port for receiving logins
can be set up. In addition to that, the protocol to be used (RADIUS, RADSEC
or all) can be set for each of the RADIUS clients in the client list. This allows,
for example, RADIUS to be used for LAN-based clients and the more robust
RADSEC via TCP to be used for registrations arriving over the Internet.
12.11.2Certificates for RADSEC
Separate X.509 certificates are required for TLS encryption of the RADSEC
connection. The individual certificates (root certificate, devices certificate and
private key) can be uploaded to the device individually or as a PKCS#12 con-
tainer.
WEBconfig: Upload certificate or file