Multitech MultiConnect rCell 100 User Manual page 82

DEVICE ADMINISTRATION
RADIUS user details:
Access to device if role is one of those in the provided list (Administrator, Engineer, or Monitor).
All RADIUS users do not have SSH access to the device.
RADIUS creates a temporary session instead of a local account like local users.
RADIUS uses shared key encryption.
Local users shall take priority over RADIUS user (if a RADIUS user has the same username as a local user, the
RADIUS user cannot log in even if the local user is disabled).
RADIUS user with Administrator role can view and modify all local users (but cannot delete a local
Administrator if it is the only local admin user on the device).
RADIUS users with Engineer and Monitor role cannot view or modify user details. They do not have access
to the User Accounts page.
RADIUS users cannot change their own password in the Web UI.
To set up the RADIUS server configuration:
1. Go to Administration > RADIUS Configuration.
2. To enable authentication, check Enable Authentication.
3. To enable accounting, check Enable Accounting.
4. Enter the following fields for RADIUS configuration:
a. Primary Server
b. Authentication Port (for Primary Server)
c. Accounting Port (for Primary Server)
d. Secondary Server
e. Authentication Port (for Secondary Server)
f. Accounting Port (for Secondary Server)
5. Under Options, enter the following fields:
a. Shared Secret Key value is used to: 1) encrypt packets between the RADIUS Server and device, 2)
encrypt RADIUS attributes such as user password, and 3) verify that RADIUS messages have not been
modified in transit. This value must be equal to the shared secret that is set up in RADIUS server. The
Shared Secret Key can be up to 128 characters long. You can click the eye icon to hide the key.
b. Authentication Protocol: select from drop-down list including PAP, EAP-PEAPv0/MSCHAPv2, or EAP-
TTLS/PAPv0
c. Timeout is the interval in seconds between tries to connect to RADIUS server in case of
communication failure. Maximum is 10 seconds.
d. Retries is the number of tries to connect to RADIUS server in case of communication failure.
6. Advanced Options are used when Authentication Protocol is EAP-PEAPv0/MSCHAPv2 or EAP-TTLS/PAPv0.
If Protocol is PAP, these settings are ignored:
a. Check Use Anonymous ID if you want to enable identity privacy. The device does not send its
identity in plain text before the device has authenticated the RADIUS server.
b. Anonymous ID is a name or value that the device will use in the identity response when "Use
Anonymous ID" is enabled.
82
®
MultiConnect rCell 100 MTR-EV3 User Guide