Cambium Networks PTP 820 Series User Manual page 637

Chapter 11: Access Management and Security
2 Save the changes in the
Step 2 – Defining the Permitted Access Channels
The access_channel of each user we configured in the
which that user is allowed to access the unit.
This is done by summing the values corresponding to the allowed channels, where the values are:
###
###
###
###
###
###
###
###
For example:
•
The value 127 denotes permission to access the device from all channels:
Serial + Telnet + SSH + Web + NMS + SNMP +SNMPv3
•
The value indicates permission to access the device only from the Web + NMS channels.
24
To define each user's access channels:
1 In the
usr/share/freeradius/dictionary.cambium
according to the following example:
###
VALUE
2 Save the changes to the
Step 3 – Specifying the RADIUS client
This step describes how to define a device as a RADIUS client. The RADIUS server accepts attempts to connect to a
device only if that is device is defined as a RADIUS client.
To define a device as a RADIUS client:
radio-ro = none,
radio-wo = none,
tdm-ro = none,
tdm-wo = none,
eth-ro = none,
eth-wo = none,
sync-ro = none,
sync-wo = none,
access_channel = u3accesschannel,
fall-through = yes
/etc/raddb/users file.
none
serial
telnet
ssh
web
nms
snmp
snmpV3
access channel for u1 user:serial+telnet+ssh+web+nms+snmp+snmpV4
ACCESS_CHANNEL
usr/share/freeradius/dictionary.cambium
phn-3965_006v002
Page 11-33
/etc/raddb/users file, defines the channels through
0
1
2
4
8
16
32
64
file, configure the values of the access channels
u1accesschannel
file.
Configuring RADIUS
127