Security
115
XS728T ProSAFE 28-Port 10-Gigabit L2+ Smart Switch
RADIUS
RADIUS servers provide authentication, authorization, and accounting services for networks.
The RADIUS server maintains a user database, which contains per-user authentication
information. The switch passes information to the configured RADIUS server, which can
authenticate a user name and password before authorizing use of the network. RADIUS
servers provide a centralized authentication method for:
• Web access
• Access control port (802.1x)
The RADIUS menu contains links to features described in the following sections:
• Global Configuration
• Server Configuration
• Accounting Server Configuration
Global Configuration
Use the RADIUS Configuration screen to add information about one or more RADIUS
servers on the network.
To configure global RADIUS server settings:
1. Select Security > Management Security > RADIUS > Global Configuration.
The Current Server IP Address field is blank if no servers are configured (see RADIUS
Server Configuration on page 162). The switch supports up to eight configured RADIUS
servers. If more than one RADIUS server is configured, the current server is the server
configured as the primary server. If no servers are configured as the primary server, the
current server is the most recently added RADIUS server.
2. In the Max Number of Retransmits field, specify the maximum number of times a request
packet is retransmitted to the RADIUS server. The valid range is 1-15 and the default is 3.
3. In the Timeout Duration field, specify the time-out value, in seconds, for request
retransmissions. The valid range is 1-30 seconds and the default is 3 seconds.
Consideration to maximum delay time must be given when configuring RADIUS
maximum retransmit and RADIUS time-out values. If multiple RADIUS servers are
configured, the maximum retransmit value on each is exhausted before the next server is
attempted. A retransmit does not occur until the configured time-out value on that server
has passed without a response from the RADIUS server. Therefore, the maximum delay
in receiving a response from the RADIUS application equals the sum of (retransmit *
time-out) for all configured servers. If the RADIUS request is generated by a user login
attempt, all user interfaces are blocked until the RADIUS application returns a response.
4. From the Accounting Mode list, select whether the RADIUS accounting mode is enabled or
disabled on the current server. RADIUS accounting is provided for both AAA and 802.1x
sessions.
5. Click Apply.
Configuration changes take effect immediately.
To Next Page
Loading...
