Security - Colubris Networks CN3000 Administrator's Manual

Chapter 2 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - How it works - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Chapter 2
Account policy
To maintain the integrity of the configuration settings, only one administrator can be
connected to the management tool at a given time. To prevent the management tool
from being locked up by an idle user, two mechanisms are in place:
• If a user's connection to the management tool remains idle for more than ten minutes,
• If a second user connects to the management tool and logs in with the correct
Validating administrator logins using a RADIUS server
You can use a RADIUS server to authenticate logins to the management tool. One
advantage of this is that it enables you to create several administrator accounts, each
with its own username and password.
Important: Make sure that the RADIUS profile you select is configured and that the
administrator account is defined on a functioning RADIUS server. If not, you will not be
able to log back into the CN3000 because the administrator password cannot be
authenticated.
To setup RADIUS authentication, do the following:
1. On the main menu, click Security then click RADIUS.
2. Click Add a New Profile.
3. Define the settings for the RADIUS profile you want to use to validate administrator
4. Click Save.
5. On the main menu, click Management, then click Management tool.
6. In the Administrator authentication box select the RADIUS profile you defined in
7. Click Save.

Security

To maintain the integrity of the configuration settings, only one user can be connected to
the management tool at a given time. To prevent the management tool from being
locked up by an idle user, two mechanisms are in place:
• If a user's connection to the management tool remains idle for more than ten minutes,
• If a second user connects to the management tool and logs in with the correct
HTTPS
Communications between the management station and the CN3000 occurs via HTTPS.
Before logging onto the management tool, users must accept a Colubris Networks
certificate. You can replace this certificate with your own. For more information see,
Chapter
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 28 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
the CN3000 automatically logs the user out.
username and password, the first user's session is terminated. If required, you can
disable this mechanism on the Management > Management tool page.
logins. Either use an existing profile or add a new profile.
step 3.
the CN3000 automatically logs the user out.
username and password, the first user's session is terminated. If required, you can
disable this mechanism on the Management > Management tool page.
10.