AudioCodes Mediant 1000 User Manual page 336

Under section 'RADIUS Authentication Settings', in the field 'Device Behavior Upon
6.
RADIUS Timeout', select the gateway's operation if a response isn't received from the
RADIUS server after the 5 seconds timeout expires:
•
Deny Access – the gateway denies access to the Web and Telnet embedded
servers.
•
Verify Access Locally – the gateway checks the local username and password.
In the field 'Local RADIUS Password Cache Timeout', enter a time (in seconds); when
7.
this time expires, the username and password verified by the RADIUS server
becomes invalid and a username and password must be re-validated with the
RADIUS server.
In the field 'Local RADIUS Password Cache Mode', select the gateway's mode of
8.
operation regarding the above-mentioned 'Local RADIUS Password Cache Timer'
option:
•
Reset Timer Upon Access – upon each access to a Web screen, the timer resets
(reverts to the initial value configured in the previous step).
•
Absolute Expiry Timer - when you access a Web screen, the timer doesn't reset
but rather continues decreasing.
In the field 'RADIUS VSA Vendor ID', enter the vendor ID you configured in the
9.
RADIUS server:
When using the Web access-level mechanism, perform one of the following options:
10.
•
When RADIUS responses include the access level attribute:
In the field 'RADIUS VSA Access Level Attribute', enter the code that indicates
the access level attribute in the Vendor Specific Attributes (VSA) section of the
received RADIUS packet.
•
When RADIUS responses don't include the access level attribute:
In the field 'Default Access Level', enter the default access level that is applied to
all users authenticated by the RADIUS server.
In the field 'Require Secured Web Connection (HTTPS)', select 'HTTPS only'.
11.
It is important you use HTTPS (secure Web server) when connecting to the gateway
over an open network, since the password is transmitted in clear text. Similarly, for
Telnet, use SSL 'TelnetServerEnable = 2 (refer to Section
Save the changes so they are available after a power fail.
12.
Reset the gateway (refer to Section
13.
After reset, when accessing the Web or Telnet servers, use the username and password
you configured in the RADIUS database. The local system password is still active and can
be used when the RADIUS server is down.
To configure RADIUS support on the gateway using the ini file:
Add the following parameters to the ini file. For information on modifying the ini file,
refer to Section
•
EnableRADIUS = 1
•
WebRADIUSLogin = 1
•
RADIUSAuthServerIP = IP address of RADIUS server
•
RADIUSAuthPort = port number of RADIUS server, usually 1812
•
SharedSecret = your shared secret'
•
HTTPSOnly = 1
•
BehaviorUponRadiusTimeout = 1
•
RadiusLocalCacheMode = 1
•
RadiusLocalCacheTimeout = 300
•
RadiusVSAVendorID = your vendor's ID
•
RadiusVSAAccessAttribute = code that indicates the access level attribute
•
DefaultAccessLevel = default access level (0 to 200)
H.323 User's Manual
5.9.3
6.2 on page 209.
336
13.2.2
on page 195).
Document #: LTRT-83401
Mediant 1000
on page 330).