LEGRAND Raritan PX3TS User Manual page 385

Field/setting Description
IP address / hostname The IP address or hostname of your Radius server.
Type of RADIUS Select an authentication protocol.
authentication
▪ PAP (Password Authentication Protocol)
▪ CHAP (Challenge Handshake Authentication Protocol)
▪ MS-CHAPv2 (Microsoft Challenge Handshake Authentication Protocol)
CHAP is generally considered more secure because the user name and
password are encrypted, while in PAP they are transmitted in the clear.
MS-CHAPv2 provides stronger security than the above two. Selecting this
option will support both MS-CHAPv1 and MS-CHAPv2.
Authentication port, The defaults are standard ports -- 1812 and 1813.
Accounting port To use non-standard ports, type a new port number.
Timeout This sets the maximum amount of time to establish contact with the Radius
server before timing out.
Type the timeout period in seconds.
Retries Type the number of retries.
Shared secret, The shared secret is necessary to protect communication with the Radius
server.
Confirm shared secret
Note: If the PX3TS clock and the LDAP server clock are out of sync, the installed
TLS certificates, if any, may be considered expired. To ensure proper
synchronization, administrators should configure the PX3TS and the LDAP
server to use the same NTP server(s).
Adding Radius Servers
To use Radius authentication, enable it and enter the information you have
gathered.
Note that you must enter information in the fields showing the message
'required.'
To add Radius servers:
1. Choose Device Settings > Security > Authentication.
2. Click New in the Radius Servers section.
3. Enter information.
Chapter 7: Using the Web Interface
365