Default User Idle Timeout; Default User Session Timeout - Colubris Networks CN3000 Administrator's Manual

Chapter 11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -Configuration parameters - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Chapter 11
To make use of this feature you need to define a RADIUS user account for each device
as follows:
• username: Set this to the username you specified in the mac-address value string. If
• password: Set this to the password you specified in the mac-address value string. If
Important: The username and password are not encrypted for transmission so it is
important that the link with the RADIUS server is secure.
Syntax
mac-address= address [, username [, password ]]
Where:
Example
Consider the scenario where several CN300/CN320s are installed with a CN3000. If the
CN300/CN320s are going to perform firmware upgrades from a remote web or FTP
server, they will need to log in to the public access network. By using MAC-based
authentication, this can easily be accomplished.
Default user idle
Use this to set the default idle timeout for all customers whose RADIUS profile does not
contain a value for the RADIUS attribute idle-timeout .
timeout
Syntax
default-user-idle-timeout= seconds
Where:
Default user
Use this to set the default session timeout for all customers whose RADIUS profile does
not contain a value for the RADIUS attribute session-timeout .
session timeout
Syntax
default-user-session-timeout= seconds
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 273 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
no username is specified, set the account name to the MAC address of the device.
Use dashes to separate characters in the address. For example: 00-20-E0-6B-4B-44.
no password is specified, set this to the same password that is used for the user
account you defined for the CN3000 on the Security > Authentication page.
Parameter Description
Specify the MAC address of the device to authenticate. Use
address
dashes to separate characters in the address. Do not use
colons (:). For example: 00-20-E0-6B-4B-44.
Specify the username to associate with this MAC address.
username
Maximum 32 alphanumeric characters. The username field
cannot contain a comma.
Specify the password to associate with this MAC address.
password
Maximum 32 alphanumeric characters. The password field
cannot contain a comma.
Parameter Description
Specify the maximum amount of time a customer session
seconds
can be idle. Once this time expires, the session is
automatically terminated. A value of 0 means no timeout.