Microsemi SyncServer S350 - Admin - Radius

ADMIN - RADIUS
ADMIN - RADIUS
RADIUS authentication provides a method for users to log into a variety of RADIUS-enabled
devices using a centrally managed username and password. The SyncServer implements
RADIUS in accordance with portions of RFC 2865 and RFC 2866.
RADIUS authentication on the SyncServer is designed to inter-operate with standard com-
pliant RADIUS servers:
n When RADIUS is enabled and configured a user can log in to the SyncServer using a
RADIUS username and password.
n
The SyncServer contacts each RADIUS server listed on the ADMIN - RADIUS page until it
receives authentication from a RADIUS server.
n If RADIUS authentication fails due to AUTHINFO_UNAVAIL reason (in other words,
server is not available), the SyncServer attempts to authenticate the user against its own
access control list.
The LAN1 port must have access to the authenticating RADIUS servers.
Extended Character Set for RADIUS logins
The following character set is available for RADIUS logins:
~!@#$%^&*()_+|\=-'{}[]:"';<>?/.,
RADIUS Configuration
For each server, set the following values:
RADIUS Server IPv4 Address: The RADIUS server's IPv4 address.
Secret Key: The authentication key shared by the RADIUS server and the SyncServer.
Timeout: The number of seconds to wait for authentication from the RADIUS server before
disconnecting and trying the next one.
Enable RADIUS Authentication: Makes RADIUS and then standard SyncServer authentication
available.
Disable RADIUS Authentication: Makes RADIUS authentication unavailable. Only standard
SyncServer authentication is available.
Note: The RADIUS and TACACS+ authentication is exclusive. When RADIUS authen-
tication is enabled, the TACACS+ authentication is automatically disabled. Vice versa, when
TACACS+ authentication is enabled, the RADIUS authentication is disabled. When the Syn-
cServer is started, power on or reboot, if the software detects that both RADIUS and
TACACS+ authentication are enabled, the TACACS+ authentication will be disabled and
only RADIUS authentication is left enabled.
997-01520-02 Rev. F1.......................................................................... Page 93