Table of Contents
Advertisement
User authentication
c. Select RADIUS for the new method from the Method drop-down.
Authentication methods are attempted in the order they are listed until the first successful
authentication result is returned. See
information about rearranging the position of the methods in the list.
9. Click Apply to save the configuration and apply the change.
Command line
1. Log into the Connect IT Mini command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. (Optional) Prevent other authentication methods from being used if RADIUS authentication
fails. Other authentication methods will only be used if the RADIUS server is unavailable.
(config)> auth tacacs+ authoritative true
(config)>
4. (Optional) Enable debug messages from the RADIUS client:
(config)> auth radius debug true
(config)>
5. (Optional) Configure the NAS ID. This is a unique identifier for this network access server (NAS).
You can use the fully-qualified domain name of the NAS or any arbitrary string. If not set, the
default value is used:
If you are accessing the Connect IT Mini device by using the WebUI, the default value is
n
for NAS ID is httpd.
If you are accessing the Connect IT Mini device by using ssh, the default value is sshd.
n
(config)> auth radius nas_id id
(config)>
6. Set the type of TLS connection used by the LDAP server:
(config)> auth ldap tls value
(config)>
Digi Connect IT® Mini User Guide
Remote Authentication Dial-In User Service (RADIUS)
Rearrange the position of authentication methods
for
424
Advertisement
Table of Contents
