GE L30 Instruction Manual page 197

CHAPTER 5: SETTINGS
Table 5-3: RADIUS server settings
Setting name Description
Primary RADIUS IP IP address of the main RADIUS server.
Address Default value indicates no Primary
RADIUS server is configured, and hence
RADIUS is disabled.
Primary RADIUS authentication port
Authentication Port
Primary Accounting RADIUS accounting port
Port
Vendor ID An identifier that specifies RADIUS
vendor-specific attributes used with the
protocol
RADIUS Authentication method used by RADIUS
Authentication server. Currently fixed to EAP-TTLS.
Method
RADIUS Shared secret used in authentication. It
Authentication displays as asterisks. This setting must
(Shared) Secret meet the CyberSentry password
requirements.
Timeout Timeout in seconds between re-
transmission requests
Retries Number of retries before giving up
Confirm RADIUS Confirmation of the shared secret. The
Authentication entry displays as asterisks.
(Shared) Secret
Table 5-4: General security settings
Setting name Description
Session Lockout Number of failed authentications before the
device blocks subsequent authentication
attempts for the lockout period
Session Lockout The period in minutes that a user is prevented
Period from logging in after being locked out
Syslog Server IP The IP address of the target Syslog server to
Address which all security events are transmitted
Syslog Server Port The UDP port number of the target syslog
Number server to which all security events are
transmitted
Device When enabled, local Device authentication
Authentication with roles is allowed. When disabled, the UR
only authenticates to the AAA server (RADIUS).
NOTE: Administrator and Supervisor (if still
enabled) remain active even after Device
authentication is disabled. The only permission
for local Administrator is to re-enable Device
authentication when Device authentication is
disabled. To re-enable Device authentication,
the Supervisor unlocks the device for setting
changes, and then the Administrator can re-
enable Device authentication.
L30 LINE CURRENT DIFFERENTIAL SYSTEM – INSTRUCTION MANUAL
Minimum Maximum
0.0.0.0 223.255.255.254
1 65535
1 65535
EAP-TTLS EAP-TTLS
See the See the following
Password password section
Requirements for requirements
section earlier
in this chapter
0 9999
0 9999
See the 245 characters
Password
Requirements
section
Minimum Maximum Default
0 (lockout 99
disabled)
0 (no period) 9999
0.0.0.0 223.255.
255.254
1 65535
Disabled Enabled
PRODUCT SETUP
Default Units Minimum
permission
0.0.0.0 - Administrator
1812 - Administrator
1813 - Administrator
Value that Administrator
represents
General
Electric
EAP-TTLS - Administrator
N/A - Administrator
10 sec Administrator
3 - Administrator
N/A - Administrator
Units Minimum
permission
3 - Administrator
3 min Administrator
0.0.0.0 - Administrator
514 - Administrator
Enabled - Administrator
5
5-19