Chapter 4: Web configuration
NS3552-8P-2S-V2 User Manual 229
The page includes the following fields:
Port state
These settings are common for all of the authentication servers.
Object Description
Timeout The Timeout, which can be set to a number between 3 and 3600 seconds, is
the maximum time to wait for a reply from a server. If the server does not
reply within this timeframe, we will consider it to be dead and continue with
the next enabled server (if any).
RADIUS servers use the UDP protocol, which is unreliable by design. In
order to cope with lost frames, the timeout interval is divided into three
subintervals of equal length. If a reply is not received within the subinterval,
the request is transmitted again. This algorithm causes the RADIUS server
to be queried up to three times before it is considered to be dead.
Dead Time The Dead Time, which can be set to a number between 0 and 3600
seconds, is the period during which the switch will not send new requests to
a server that has failed to respond to a previous request. This will stop the
switch from continually trying to contact a server that it has already
determined as dead.
Setting the Dead Time to a value greater than 0 (zero) will enable this
feature, but only if more than one server has been configured.
RADIUS authentication/accounting server configuration
The table has one row for each RADIUS server and a number of columns, which are:
Object Description
# The RADIUS server number for which the configuration below applies.
Enabled Enable the RADIUS server by selecting this check box.
IP
Address/Hostname
The IP address or hostname of the RADIUS server. IP address is expressed
in dotted decimal notation.
Port The UDP port to use on the RADIUS server. If the port is set to 0 (zero), the
default port (1812) is used on the RADIUS server.
Secret The secret - up to 29 characters long - shared between the RADIUS server
and the switch.
TACACS+ authentication server configuration
The table has one row for each TACACS+ authentication server and a number of
columns, which are:
Object Description
# The TACACS+ authentication server number for which the configuration
below applies.
Enabled Enable the TACACS+ authentication server by selecting this check box.
IP
Address/Hostname
The IP address or hostname of the TACACS+ authentication server. IP
address is expressed in dotted decimal notation.
Port The UDP port to use on the TACACS+ authentication server. If the port is
To Next Page
Loading...
