MR ETOS ED - User Authentication Via RADIUS (Optional)

9 Visualization
Maschinenfabrik Reinhausen GmbH 2020320 6385142/08 ENETOS
®
ED
You can only change access rights if you are assigned an administrator
role.
When in delivery status, you can log in as the administrator as follows:
▪ User name: admin
▪ Password: admin
To set the access rights to parameters and events, proceed as follows:
1. Go to Settings > Administration > Parameters/events.
ð A list of all parameters or events appears.
2. Select the desired entry in the list.
3. Select the options you want.
4. Press the Accept button to save the change.
9.34.5 User authentication via RADIUS (optional)
The device supports user authentication via RADIUS in accordance with
RFC2865. In this case, the device also functions as a RADIUS client. To
use RADIUS, you must create a dictionary for ISM® devices on your RA-
DIUS server and set the parameters for RADIUS on the device.
Note the following information:
▪ Only use RADIUS in a secure network, as sensitive information is trans-
mitted.
▪ If a user ID has been created both on the RADIUS server and locally on
the device, the device first tries to log in via the RADIUS server. If it is not
possible to log in, the device will use the locally saved login data.
▪ If a user ID has not been created on the RADIUS server, the device uses
the locally saved login data.
9.34.5.1 Creating a dictionary on the RADIUS server
You must create a dictionary for ISM® devices on your RADIUS server in
accordance with the following specification.
VENDOR MR 34559
BEGIN-VENDOR MR
# Attributes
ATTRIBUTE MR-ISM-User-Group 1 integer
# Predefined values for attribute 'MR-ISM-User-Group'
VALUE MR-ISM-User-Group Administrator 1
VALUE MR-ISM-User-Group Parameter-configurator 2
VALUE MR-ISM-User-Group Operator 3
VALUE MR-ISM-User-Group Diagnostics 4
VALUE MR-ISM-User-Group Data-display 5
END-VENDOR MR