Configuring Radius Support - 3Com V7122 User Manual

Configure the gateway's relevant parameters according to
5

Configuring RADIUS Support

For information on the RADIUS parameters, see
To configure RADIUS support on the gateway using the Embedded Web Server:
Access the Embedded Web Server
1
Open the 'General Security Settings' screen (Advanced Configuration menu >
2
Security Settings > General Security Settings option); the 'General Security Settings'
screen is displayed.
Under section 'General RADIUS Settings', in the field 'Enable RADIUS Access Control',
3
select 'Enable'; the RADIUS application is enabled.
In the field 'Use RADIUS for Web / Telnet Login', select 'Enable'; RADIUS authentication
4
is enabled for Web and Telnet login.
Enter the RADIUS server IP address, port number and shared secret in the relevant
5
fields.
Under section 'RADIUS Authentication Settings', in the field 'Device Behavior Upon
6
RADIUS Timeout', select the gateway's operation if a response isn't received from the
RADIUS server after the 5 seconds timeout expires:
Deny Access: the gateway denies access to the Web and Telnet embedded servers.
Verify Access Locally: the gateway checks the local username and password.
In the field 'Local RADIUS Password Cache Timeout', enter a time (in seconds); when
7
this time expires, the username and password verified by the RADIUS server becomes
invalid and a username and password must be re-validated with the RADIUS server.
In the field 'Local RADIUS Password Cache Mode', select the gateway's mode of
8
operation regarding the above-mentioned 'Local RADIUS Password Cache Timer'
option:
Reset Timer Upon Access: upon each access to a Web screen, the timer resets
(reverts to the initial value configured in the previous step).
Absolute Expiry Timer: when you access a Web screen, the timer doesn't reset but
rather continues decreasing.
In the field 'RADIUS VSA Vendor ID', enter the vendor ID you configured in the RADIUS
9
server:
10 When using the Web access-level mechanism, perform one of the following options:
When RADIUS responses include the access level attribute:
In the field 'RADIUS VSA Access Level Attribute', enter the code that indicates the
access level attribute in the Vendor Specific Attributes (VSA) section of the received
RADIUS packet.
352
Table 39.
(Accessing the Embedded Web
Configuring RADIUS Support.
Server).
V7122 GatewayUser Guide