Table of Contents
Advertisement
Media Flow Manager Administrator's Guide
Authorization
Set authorization options. See
•
Map Order— Determine how the remote user mapping behaves when authenticating
users via RADIUS or TACACS+. If the authenticated user name is valid locally, no
mapping is performed. Options:
•
remote-first— If a local-user mapping attribute is returned and is a valid local user
name, map the authenticated user to the local user specified in the attribute.
Otherwise, if the attribute is not present or not valid locally, use the user specified as
the default-user.
•
remote-only — Only try to map a remote authenticated user if the authentication
server sends a local-user mapping attribute; otherwise, no further mapping is tried.
•
local-only — All remote users are mapped to the user specified by Map Default
User. Any vendor attributes received by an authentication server are ignored.
Figure 28
System Config > AAA Page Detail
System Config > RADIUS
Configure RADIUS authentication. See
Default RADIUS Settings
View and change Default RADIUS Settings. See
•
Key—A shared secret text string. If no key is set, the user is prompted for the key.
•
Timeout—Timeout for retransmitting a request to any RADIUS server. Range is 1-60,
default is 3.
•
Retransmit—The number of times the client attempts to authenticate with any RADIUS
server. Range is 0-5, default is 1.
•
Login-lat-group—The string that identifies the groups that the user is authorized to use
when Login-service is defined as LAT (local area transport). If none is set, the user is
prompted for the string.
Click Apply to complete operation; Cancel to revert to existing configuration. Click Save at the
top of the page to make changes persistent across reboots.
CHAPTER 3 Media Flow Manager Web-Based Interface
Figure 28.
radius-server
Figure
for CLI details.
29, next.
System Config
51
Advertisement
Table of Contents
