Siemens SCALANCE XM-400 Configuration Manual page 442
Industrial ethernet switches
Hide thumbs
Also See for SCALANCE XM-400:
- Configuration manual (960 pages) ,
- Operating instructions manual (80 pages) ,
- Instructions manual (60 pages)
Table of Contents
Advertisement
Configuring with Web Based Management
5.8 The "Security" menu
Local logon
The local logging on of users by the device runs as follows:
1. The user logs on with user name and password on the device.
2. The device checks whether an entry exists for the user.
→ If an entry exists, the user is logged in with the rights of the associated role.
→ If no corresponding entry exists, the user is denied access.
Login via an external RADIUS server
RADIUS(Remote Authentication Dial-In User Service) is a protocol for authenticating and
authorizing users by servers on which user data can be stored centrally.
Depending on the RADIUS authorization mode you have selected on the "Security > AAA >
RADIUS Client" page, the device evaluates different information of the RADIUS server.
RADIUS authorization mode "Standard"
If you have set the authorization mode "conventional", the authentication of users via a RADIUS
server runs as follows:
1. The user logs on with user name and password on the device.
2. The device sends an authentication request with the login data to the RADIUS server.
3. The RADIUS server runs a check and signals the result back to the device.
– The RADIUS server reports a successful authentication and for the "Service Type"
– The RADIUS server reports a successful authentication and returns a different or even
– The RADIUS server reports a failed authentication to the device:
RADIUS authorization mode "Vendor Specific"
Requirement
For the RADIUS authorization mode "Vendor Specific" the following needs to be set on the
RADIUS server:
● Manufacturer code: 4196
● Attribute number: 1
● Attribute format: Character string (group name)
Procedure
442
attribute returns the value "Administrative User" to the device
→ The user is logged in with read/write rights.
no value to the device for the attribute "Service Type".
→ The user is logged in with read rights.
→ The user is denied access.
SCALANCE XM-400/XR-500 Web Based Management (WBM)
Configuration Manual, 05/2017, C79000-G8976-C248-12
Advertisement
Table of Contents
