Configuring Radius Support - 3Com VCX v7111 User Manual

Configuring RADIUS Support

For information on the RADIUS parameters, see
To configure RADIUS support on the gateway using the Embedded Web Server:
Access the Embedded Web Server (see
1
Open the General Security Settings screen (Advanced Configuration menu > Security
2
Settings > General Security Settings option); the General Security Settings screen is
displayed.
Under section General RADIUS Settings, in the field Enable RADIUS Access Control,
3
select Enable; the RADIUS application is enabled.
In the field Use RADIUS for Web / Telnet Login, select Enable; RADIUS authentication is
4
enabled for Web and Telnet login.
Enter the RADIUS server IP address, port number and shared secret in the relevant
5
fields.
Under section RADIUS Authentication Settings, in the field Device Behavior Upon
6
RADIUS Timeout, select the gateways operation if a response is not received from the
RADIUS server after the 5 seconds timeout expires:
Deny Access – the gateway denies access to the Web and Telnet embedded
servers.
Verify Access Locally – the gateway checks the local username and password.
In the field Local RADIUS Password Cache Timeout, enter a time (in seconds); when this
7
time expires, the username and password verified by the RADIUS server becomes
invalid and a username and password must be re-validated with the RADIUS server.
In the field Local RADIUS Password Cache Mode, select the gateways mode of
8
operation regarding the above-mentioned Local RADIUS Password Cache Timer option:
Reset Timer Upon Access – upon each access to a Web screen, the timer resets
(reverts to the initial value configured in the previous step).
Absolute Expiry Timer - when you access a Web screen, the timer does not reset but
rather continues decreasing.
In the field RADIUS VSA Vendor ID, enter the vendor ID you configured in the RADIUS
9
server:
10 When using the Web access-level mechanism, perform one of the following options:
When RADIUS responses include the access level attribute:
In the field RADIUS VSA Access Level Attribute, enter the code that indicates the
access level attribute in the Vendor Specific Attributes (VSA) section of the received
RADIUS packet.
When RADIUS responses do not include the access level attribute:
In the field Default Access Level, enter the default access level that is applied to all
users authenticated by the RADIUS server.
340
Table 64.
Accessing the Embedded Web
®
3Com VCX V7111 VoIP Gateway User Guide
Server).