GE C30 Instruction Manual page 127

5 SETTINGS
VALUE GE-UR-Role
END-VENDOR
#############################################################
f. In the dictionary file in the <Path_to_Radius>\etc\raddb folder, add the following line.
$INCLUDE dictionary.ge
g. For the first start, run the RADIUS server in debug mode by entering <Path_to_Radius>/start_radiusd_debug.bat
h. Set up the RADIUS client on the UR as follows. Access Device > Settings > Product Setup > Security. Configure
the IP address and ports for the RADIUS server. Leave the GE vendor ID field at the default of 2910. Update the
RADIUS shared secret as specified in the CLIENTS.CONF file.
3. On the RADIUS server, configure the user accounts. Do not use the five pre-defined roles as user names (Administra-
tor, Supervisor, Engineer, Operator, Observer) in the RADIUS server. If you do, the UR relay automatically provides the
authentication from the device.
4. In the EnerVista software, choose server authentication and log in using the user name and password configured on
the RADIUS server for server authentication login.
5. After making any required changes, log out using the Commands > Relay Maintenance > Security menu.
For all user roles except Observer, only one instance can be logged in at one time, for both login by
front panel and software.
When changing settings offline, ensure that only settings permitted by the role that performs the set-
tings download are changed because only those changes are applied.
Targets refer to errors display on the front panel or the Targets panel in the EnerVista software. User accounts of Adminis-
trator, Engineer, and Factory Service can reset the targets using the reset key.
To reset targets:
1. Log in as Administrator, Engineer, and Factory Service and make the changes. To reset the security-related self-test or
authentication lockout, log in as Administrator or Supervisor and execute a clear security command under Commands
> Security > Clear Security.
b) MAIN MENU

PATH: SETTINGS PRODUCT SETUP
 SECURITY

MESSAGE
MESSAGE
MESSAGE
MESSAGE
MESSAGE
MESSAGE
Login: This setting is applicable for Local Authentication only. This setting allows a user to login with a specific role, see
descriptions below. For the Supervisor role, the "Supervisor Role" setting should be enabled.
GE Multilin
Observer 5
GE

SECURITY
LOGIN:
None
 CHANGE LOCAL
 PASSWORDS
 SESSION
 SETTINGS
 RESTORE DEFAULTS

 SUPERVISORY

SYSLOG IP ADDRESS:
0.0.0.0
SYSLOG PORT NUMBER:
514
C30 Controller System
5.2 PRODUCT SETUP
Range: Administrator, Engineer, Supervisor,
Operator, Factory (for factory use only), None
See page 5–12.
See page 5–13.
See page 5–13.
See page 5–13.
Range: 0.0.0.0, 255.255.255.255
Range: 1 to 65535
5
5-11