Table of Contents
Advertisement
User authentication
backup RADIUS servers are unavailable. Additionally, users who are configured locally but are not
configured on the RADIUS server are still able to log into the device. Authentication methods are
attempted in the order they are listed until the first successful authentication result is returned;
therefore if you want to ensure that users are authenticated first through the RADIUS server, and only
authenticated locally if the RADIUS server is unavailable or if the user is not defined on the RADIUS
server, then you should list the RADIUS authentication method prior to the Local users authentication
method.
See
User authentication methods
If the RADIUS servers are unavailable and the Connect IT 16/48 device falls back to local
authentication, only users defined locally on the device are able to log in. RADIUS users cannot log in
until the RADIUS servers are brought back online.
Configure your Connect IT 16/48 device to use a RADIUS server
This section describes how to configure a Connect IT 16/48 device to use a RADIUS server for
authentication and authorization.
Required configuration items
Define the RADIUS server IP address or domain name.
n
Define the RADIUS server shared secret.
n
Add RADIUS as an authentication method for your Connect IT 16/48 device.
n
Additional configuration items
Whether other user authentication methods should be used in addition to the RADIUS server,
n
or if the RADIUS server should be considered the authoritative login method.
The RADIUS server port. It is configured to 1812 by default.
n
Add additional RADIUS servers in case the first RADIUS server is unavailable.
n
The server NAS ID. If left blank, the default value is used:
n
If you are access the Connect IT 16/48 device by using the WebUI, the default value is for
l
NAS ID is httpd.
If you are access the Connect IT 16/48 device by using ssh, the default value is sshd.
l
Time in seconds before the request to the server times out. The default is 3 seconds and the
n
maximum possible value is 60 seconds.
Enable additional debug messages from the RADIUS client.
n
WebUI
1. Log into the Connect IT 16/48 WebUI as a user with full Admin access rights.
2. On the menu, click System. Under Configuration, click Device Configuration.
The Configuration window is displayed.
3. Click Authentication > RADIUS > Servers.
Digi Connect IT® 16/48 User Guide
Remote Authentication Dial-In User Service (RADIUS)
for more information about authentication methods.
526
Advertisement
Table of Contents
