Authentication Options; Cn3000 Radius Authentication - Colubris Networks CN3000 Administrator's Manual

Chapter 11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -Configuration parameters - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Chapter 11

Authentication options

Open the Security > Authentication page.
CN3000 RADIUS If you do not have a RADIUS server, you can disable this feature and run in Local Mode.
The
authentication
RADIUS profile
Choose the RADIUS profile that will be used to authenticate the CN3000.
RADIUS username
Name of the RADIUS account assigned to the CN3000.
RADIUS password / Confirm password
Password of the RADIUS account assigned to the CN3000.
Authentication interval
The CN3000 will re-authenticate itself each time this interval expires. This enables it to
retrieve updated operating information at regular intervals.
To avoid potential service interruptions that may occur when new operating information
is activated by the CN3000, it is strongly recommended that a large interval (12 hours or
more) be used.
You can override this value using the RADIUS Attribute Session-timeout, which enables
the following effective strategy: Configure Authentication interval to a small value (10
to 20 minutes) and set the RADIUS Attribute Session-timeout to override it with a large
value (12 hours) when authentication is successful. Since the Authentication interval is
also respected for Access Reject packets, this configuration results in a short re-
authentication interval in the case of failure, and a long one in the case of success.
Accounting
Enable this option to have the CN3000 generate a RADIUS accounting request ON/OFF
each time its authentication state changes.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 245 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -