Symbol WS5000 Series System Reference Manual page 194

6-42
WS5000 Series Switch System Reference Guide
6. When done, click Next. Depending on the Encryption and Authentication settings specified, the
subsequent panels change. These different panels, and how to configure their settings or controls
follow:
• Kerberos Authentication Settings on page 6-42
• WEP Encryption Settings on page 6-43
• EAP Authentication Settings on page 6-44
Figure 6.62 Kerberos Authentication Settings
The Kerberos Authentication Settings panel is where Kerberos KDC (Key Distribution Center) servers
and realm are specified for the Security Policy, as described in
Table 6.7 Kerberos Authentication Settings
Setting
Primary/Backup/Remote KDC
Address and Port
KDC Ports
Description
The three KDC text fields require fully-qualified domain names or IP addresses of
the Primary KDC, and optionally, the Backup KDC, and Remote KDC servers. The
three servers should actually be thought of as "primary," "first backup," and
"second backup."
If the Primary KDC fails, the system looks for the Backup KDC. If the backup fails,
it looks for the (nominal) Remote KDC. Thus, for example, the Primary KDC can be
a remote server, the Backup KDC can be the on-board KDC of the Primary Switch
("Primary" in the failover mode sense), and the Remote KDC can be the Standby
Switch (again, in the failover sense).
If using the switch's on-board Kerberos server, specify the actual IP address of
NIC1 or NIC2, depending on which one you want to use.
Note A properly-formed, fully-qualified domain name or IP address
is required. The panel does not perform validation checking.
Typically, 88 (default value).
Table 6.7.