GE G30 Instruction Manual page 192

PRODUCT SETUP
Table 5-3: RADIUS server settings
Setting name
Primary RADIUS IP
Address
Primary
Authentication Port
Primary Accounting
Port
Vendor ID
RADIUS
Authentication
Method
RADIUS
Authentication
(Shared) Secret
Timeout
Retries
5 Confirm RADIUS
Authentication
(Shared) Secret
Table 5-4: General security settings
Setting name
Session Lockout
Session Lockout
Period
Syslog Server IP
Address
Syslog Server Port
Number
Device
Authentication
5-18
Description
IP address of the main RADIUS server.
Default value indicates no Primary
RADIUS server is configured, and hence
RADIUS is disabled.
RADIUS authentication port
RADIUS accounting port
An identifier that specifies RADIUS
vendor-specific attributes used with the
protocol
Authentication method used by RADIUS
server. Currently fixed to EAP-TTLS.
Shared secret used in authentication. It
displays as asterisks. This setting must
meet the CyberSentry password
requirements.
Timeout in seconds between re-
transmission requests
Number of retries before giving up
Confirmation of the shared secret. The
entry displays as asterisks.
Description
Number of failed authentications before the
device blocks subsequent authentication
attempts for the lockout period
The period in minutes that a user is prevented
from logging in after being locked out
The IP address of the target Syslog server to
which all security events are transmitted
The UDP port number of the target syslog
server to which all security events are
transmitted
When enabled, local Device authentication
with roles is allowed. When disabled, the UR
only authenticates to the AAA server (RADIUS).
NOTE: Administrator and Supervisor (if still
enabled) remain active even after Device
authentication is disabled. The only permission
for local Administrator is to re-enable Device
authentication when Device authentication is
disabled. To re-enable Device authentication,
the Supervisor unlocks the device for setting
changes, and then the Administrator can re-
enable Device authentication.
Minimum Maximum
0.0.0.0 223.255.255.254
1 65535
1 65535
EAP-TTLS EAP-TTLS
See the See the following
Password password section
Requirements for requirements
section earlier
in this chapter
0 9999
0 9999
See the 245 characters
Password
Requirements
section
Minimum Maximum Default
0 (lockout 99
disabled)
0 (no period) 9999
0.0.0.0 223.255.
255.254
1 65535
Disabled Enabled
G30 GENERATOR PROTECTION SYSTEM – INSTRUCTION MANUAL
CHAPTER 5: SETTINGS
Default Units Minimum
permission
0.0.0.0 - Administrator
1812 - Administrator
1813 - Administrator
Value that Administrator
represents
General
Electric
EAP-TTLS - Administrator
N/A - Administrator
10 sec Administrator
3 - Administrator
N/A - Administrator
Units Minimum
permission
3 - Administrator
3 min Administrator
0.0.0.0 - Administrator
514 - Administrator
Enabled - Administrator