AudioCodes Mediant 600 User Manual page 647

User's Manual
Parameter
Web: RADIUS
Authentication Server IP
Address
EMS: RADIUS Auth
Server IP
[RADIUSAuthServerIP]
Web: RADIUS
Authentication Server Port
EMS: RADIUS Auth
Server Port
[RADIUSAuthPort]
Web: RADIUS Shared
Secret
EMS: RADIUS Auth
Server Secret
[SharedSecret]
RADIUS Authentication Parameters
Web: Default Access
Level
[DefaultAccessLevel]
Web: Device Behavior
Upon RADIUS Timeout
[BehaviorUponRadiusTi
meout]
Web: Local RADIUS
Password Cache Mode
[RadiusLocalCacheMod
e]
Web: Local RADIUS
Password Cache Timeout
[RadiusLocalCacheTime
Version 6.6

For RADIUS login authentication to function, you also need to set
the following parameters:

EnableRADIUS = 1 (Enable)

WebAuthMode = 0 (Basic Mode)

RADIUS authentication requires HTTP basic authentication, where
the username and password are transmitted in clear text over the
network. Therefore, it's recommended to set the HTTPSOnly
parameter to 1 in order to force the use of HTTPS, since the
transport is encrypted.

If using RADIUS authentication to log into the CLI, only the primary
Web User Account, which has Security Administration access level,
can access the device's CLI (see 'Configuring Web User Accounts'
on page 64).
Defines the IP address of the RADIUS authentication server.
Note: For this parameter to take effect, a device reset is required.
Defines the port of the RADIUS Authentication Server.
Note: For this parameter to take effect, a device reset is required.
Defines the 'Secret' used to authenticate the device to the RADIUS
server. This should be a cryptically strong password.
Defines the default access level for the device when the RADIUS
(authentication) response doesn't include an access level attribute.
The valid range is 0 to 255. The default is 200 (i.e., Security
Administrator).
Defines the device's response upon a RADIUS timeout.

[0] Deny Access = Denies access.

[1] Verify Access Locally = (Default) Checks password locally.
Determines the device's mode of operation regarding the timer
(configured by the parameter RadiusLocalCacheTimeout) that
determines the validity of the user name and password (verified by the
RADIUS server).

[0] Absolute Expiry Timer = When you access a Web page, the
timeout doesn't reset, instead it continues decreasing.

[1] Reset Timer Upon Access = (Default) Upon each access to a
Web page, the timeout always resets (reverts to the initial value
configured by RadiusLocalCacheTimeout).
Defines the time (in seconds) the locally stored user name and
password (verified by the RADIUS server) are valid. When this time
expires, the user name and password become invalid and a must be re-
647
52. Configuration Parameters Reference
Description
Mediant 600 & Mediant 1000