D-Link DFL-1600 User Manual page 162

142
1. HTTP authentication will collide with WebUI's remote management
service which also uses TCP port 80. To avoid this, please change
WebUI port in Advanced Settings for Remote Management
before proceeding the authentication configuration, for example, using
port 81 instead.
2. In HTTP(s) Agent Options, there are two login types available,
HTMLForm and BasicAuth. The problem with BasicAUTH is
that Web browsers cache the username and password entered in the
401- Authentication Required dialog. This is normally no problem if
the browser is closed down, as it then clears the cache; but for
systems with the browser imbedded in the operating system, the
cache is harder to clear. Therefore, HTMLForm is recommended. A
Realm String can be defined to be shown in the 401- Authentication
Required dialog for BasicAUTH option.
3. Timeout can be adjusted in User Authentication
Authentication Rules
Timeout and Session Timeout.
Idle Timeout: If a user has successfully been authenticated,
and no traffic has been seen from his IP address for this number
of seconds, he/she will automatically be logged out. The value is
1800 by default.
Session Timeout: If a user has successfully been authenticated,
he/she will automatically be logged out after this many seconds,
regardless of if the firewall has seen activity from the user or not.
Use timeouts received from the authentication server
checkbox: Some RADIUS servers can be configured to return
idle-timeout and session values. If this checkbox is selected, the
firewall will try to use these timeouts, prior to the timeout values
specified above. If no timeouts are received from the
authentication server, the timeout values specified above will be
used.
4. Another Restrictions configuration is the Multiple Username
Logins. Three options are available as explained below:
Note
Restrictions. The options are Idle
D-Link Firewalls User's Guide
Chapter 17. User Authentication
User