Hirschmann HiSecOS EAGLE20 - Page 86

Device Security > Authentication List
Device Security
86
RM GUI HiSecOS EAGLE20/30
Release 3.0 09/2015
 Table
Parameters Meaning
Name Displays the name of the list.
To create a new list, click the "Create" button.
Possible values:
 alphanumeric ASCII character string with 1..32 characters
Policy 1
Policy 2
Policy 3
Policy 4
Policy 5
Displays the authentication policy that the device uses for access using
the application specified in the "Dedicated Applications" field.
The device gives you the option of a fall-back solution. For this, you
specify another policy in each of the policy fields. Depending on the order
of the values entered in each policy, if the authentication with the specified
policy is unsuccessful, the device can use the next policy.
Possible values:
 local (default setting)
The device authenticates the users by using the local user
management, see the
Device Security > User Management dialog.
 radius
The device authenticates the users with a RADIUS server in the
network. You specify the RADIUS server in the
Network Security >
RADIUS > Authentication Server dialog.
 reject
The device accepts or rejects the authentication depending on which
policy you try first. The following list contains authentication scenarios:
– If the first policy in the authentication list is
local and the device
accepts the credentials of the user, then it logs the user in without
attempting the other polices.
– If the first policy in the authentication list is
local and the device
denies the credentials of the user, then it attempts to log the user
in using the other polices in the order specified.
– If the first policy in the authentication list is
radius or ldap and the
device rejects a login, then the login is immediately rejected
without attempting to login the user using another policy.
If there is no response from the RADIUS or LDAP server, the
device attempts to authentication the user with the next policy.
– If the first policy in the authentication list is
reject , then the
devices immediately rejects the user login without attempting
another policy.