MR TAPCON - User Authentication Via RADIUS (Optional)

8 Operation
Maschinenfabrik Reinhausen GmbH 2020246 3587317/21 ENTAPCON
®
8.26.5 User authentication via RADIUS (optional)
The device supports user authentication via RADIUS in accordance with
RFC2865. In this case, the device also functions as a RADIUS client. To
use RADIUS, you must create a dictionary for ISM® devices on your RA-
DIUS server and set the parameters for RADIUS on the device.
Note the following information:
▪ Only use RADIUS in a secure network, as sensitive information is trans-
mitted.
▪ If a user ID has been created both on the RADIUS server and locally on
the device, the device first tries to log in via the RADIUS server. If it is not
possible to log in, the device will use the locally saved login data.
▪ If a user ID has not been created on the RADIUS server, the device uses
the locally saved login data.
8.26.5.1 Creating a dictionary on the RADIUS server
You must create a dictionary for ISM® devices on your RADIUS server in
accordance with the following specification.
VENDOR MR 34559
BEGIN-VENDOR MR
# Attributes
ATTRIBUTE MR-ISM-User-Group 1 integer
# Predefined values for attribute 'MR-ISM-User-Group'
VALUE MR-ISM-User-Group Administrator 1
VALUE MR-ISM-User-Group Parameter-configurator 2
VALUE MR-ISM-User-Group Operator 3
VALUE MR-ISM-User-Group Diagnostics 4
VALUE MR-ISM-User-Group Data-display 5
END-VENDOR MR
If your RADIUS server supports the importing of a dictionary, you can export
the dictionary for ISM® devices from the device and import it onto your RA-
DIUS server. For more information, refer to the information in the section ti-
tled Exporting data [►Section 8.28.1, Page 251].
The user groups of the dictionary correspond to the user roles [►Section
8.26.1, Page 241] of the device and the corresponding authorizations.