Table of Contents
Advertisement
The following table describes the items in the previous figure.
Item
Current
IP Address/Host
Name
Server Name
Port Number
Server Type
Secret Configured
Message Authentica-
tor
Refresh
Add
Edit
Remove
To add a new RADIUS authentication server:
Click Security > RADIUS > Named Server > Add.
Figure 4.296 Security > RADIUS > Named Server > Add
EKI-9500 Series User Manual
Description
Indicates whether the RADIUS server is the current server (True) or a
backup server (False) within its group. If more than one RADIUS
server is configured with the same Server Name, the device selects
one of the servers to be the current server in the named server group.
When the device sends a RADIUS request to the named server, the
request is directed to the server selected as the current server. Initially
the primary server is selected as the current server. If the primary
server fails, one of the other servers becomes the current server. If no
server is configured as the primary server, the current server is the
RADIUS server that is added to the group first.
The IP address or host name of the RADIUS server. Host names must
be resolvable by DNS and are composed of a series of labels sepa-
rated by dots.
The name of the RADIUS server. RADIUS authentication servers that
are configured with the same name are members of the same named
RADIUS server group. RADIUS servers in the same group serve as
backups for each other.
The UDP port on the RAIDUS authentication server to which the local
RADIUS client sends request packets.
Indicates whether the server is the Primary or a Secondary RADIUS
authentication server. When multiple RADIUS servers have the same
Server Name value, the RADIUS client attempts to use the primary
server first. If the primary server does not respond, the RADIUS client
attempts to use one of the backup servers within the same named
server group.
Indicates whether the shared secret for this server has been config-
ured.
Indicates whether the RADIUS server requires the Message Authenti-
cator attribute to be present. The Message Authenticator adds protec-
tion to RADIUS messages by using an MD5 hash to encrypt each
message. The shared secret is used as the key, and if the message
fails to be verified by the RADIUS server, it is discarded.
Click Refresh to update the screen.
Click Add to add a new RADIUS authentication server.
Click Edit to edit the selected entries.
Click Remove to remove the selected entries.
270
Advertisement
Table of Contents
