LEGRAND Server Technology PRO3X User Manual page 203

▶
To duplicate LDAP/LDAPS server settings:
If you have added any LDAP/LDAPS server to the PRO3X, and the server you will add shares identical
settings with an existing one, the most convenient way is to duplicate that LDAP/LDAPS server's data
and then revise the IP address/host name.
1) Choose Device Settings > Security > LDAP, then click New.
2) Select the "Copy settings from existing LDAP server" checkbox.
3) Select the LDAP/LDAPS server whose settings you want to copy.
4) Modify the IP Address/Hostname field.
5) Click Add Server.
Adding Radius Servers
To use Radius authentication, enable it and enter the information you have gathered.
Note: The RADIUS NAS Identifier is "DPC PDU SN:<device serial number>".
▶
To add Radius servers:
1) Choose Device Settings > Security > RADIUS.
2) Click New.
3) Enter information.
Field/setting
IP address / hostname The IP address or hostname of your Radius server.
Type of RADIUS
authentication
Authentication port,
Accounting port
Accounting Enabled?
Description
Select an authentication protocol.
• •
PAP (Password Authentication Protocol)
• • CHAP (Challenge Handshake Authentication Protocol)
• •
MS-CHAPv2 (Microsoft Challenge Handshake Authentication Protocol)
CHAP is generally considered more secure because the user name and password
are encrypted, while in PAP they are transmitted in the clear.
MS‑CHAPv2 provides stronger security than the above two. Selecting this option
will support both MS-CHAPv1 and MS-CHAPv2.
Note: All authentication methods are insecure. It is strongly recommended
to use RADIUS only in a secure networking environment. A warning
displays for all methods.
The defaults are standard ports -- 1812 and 1813.
To use non-standard ports, type a new port number.
Default is enabled.
Accounting allows you to log activity executed on the RADIUS server.
When RADIUS accounting is enabled and the RADIUS server does not support
accounting, then authentication will fail.
203