Radius Operation And Configuration - Comtech EF Data CDM-570A Installation And Operation Manual

I.4

RADIUS Operation and Configuration

RADIUS is available only when you configure the CDM-570A/570AL for IP or IP-ACM operating
mode. Enabling and disabling of RADIUS is possible only through:
•
The CDM-570A/570AL front panel;
•
The CDM-570A/570AL HTTP (Web Server) Interface Admin | Access page;
•
Issuance of Telnet remote commands.
With RADIUS enabled, any login attempt through the HTTP, Telnet, or Telnet CLI interfaces
results in the modem first contacting the RADIUS Client Server for authentication and
authorization before granting remote user access. Comtech EF Data provides three levels of user
access/login – Admin, Read/Write, and Read Only. Access to operations is controlled as follows:
User Access Login Level
Admin User (system*)
Read/Write User
Read-Only User
•
RADIUS does not control user access to the CDM-570A/570AL Front Panel,
serial-based remote product management, or the SNMP user interface.
•
*System administration under the Admin User login privilege does not
require RADIUS.
•
Admin User credentials are stored in the modem, so login as Admin User
does not require the RADIUS Server connectivity.
•
SNMP access can be disabled using System Admin access.
RADIUS Client
CDM-570A/570AL Satellite Modem with Optional Packet Processor
Access Restriction(s)
Full read/write access to all remote commands and queries via Telnet, Telnet CLI
(when unit is equipped with the Optional IP Packet Processor), and web pages
(including RADIUS configuration and control using the Admin | Access web page),
• No Access to Admin- or IP Packet Processor-related Telnet remote
commands and queries, Telnet CLI, and web pages.
• Full read/write access to all modem configuration and monitoring web pages
(except Admin).
• No Access to Admin or IP Packet Processor-related web pages, Telnet remote
commands and queries, or Telnet CLI.
• Read Only Access for all other web pages.
I–4
Revision 5
MN-CDM570A