Introduction - AKCP FreeRADIUS SP+ User Manual

Introduction

What is RADIUS
Remote Authentication Dial In User Service (RADIUS) is a networking
centralized Authentication, Authorization, and Accounting (AAA) management for computers to
connect and use a network service.
This is a feature that we've added to the sensorProbe+ web interface so that the unit can be
accessed securely through a Radius Server running on the Local Area Network. It is used to:
To authenticate users or devices before granting them access to the units web
A.
interface,
To authorize those users or devices for access the the units web interface.
B.
Accounting is the process of generating log files that record session statistics used
C.
for billing, system diagnosis, and usage planning.
Implementation
The sensorProbe+ implements Radius Authentication(RFC 2865) and Accounting(RFC 2866)
via the web interface. It means that only log in or log off via the web interface can be
authenticated (and logged) with the Radius Server.
As of firmware 5937 it is possible to define specific attributes for each user at the server side to
check whether the user has administrator rights or just a simple user (privilege level checking).
All Radius users which doesn't have the privilege level attributes set, will only have Viewer level
(read-only) access to the SP+ web UI (for details, see the section How it works).
IPv6 information
In this manual we'll only show the configuration using IPv4 addressing, but the sensorProbe+
also supports Radius with IPv6. The only difference is the IP address format; everything else in
the configuration is identical with IPv4.
- 3 -
SP+ Radius User Manual
protocol that provides