Radius Settings; Radius Configuration - Ubiquiti EdgeSwitch ES-24-250W Administration Manual

EdgeSwitch Administration Guide
™

RADIUS Settings

Remote Authorization Dial-In User Service (RADIUS) servers provide additional security for networks. The
RADIUS server maintains a user database, which contains per-user authentication information. RADIUS
servers provide a centralized authentication method for:
• Telnet Access
• Web Access
• Console to Switch Access
• Port Access Control (802.1X)
The RADIUS folder contains links to pages that help you view and configure system RADIUS settings.

RADIUS Configuration

Use the RADIUS Configuration page to view and configure various settings for the RADIUS servers configured
on the system. To access the page, click Security > RADIUS > Configuration in the navigation menu.
Field
Max Number of Retransmits
Timeout Duration
Accounting Mode
NAS-IP Address
Use the buttons at the bottom of the page to perform the following actions:
• If you make changes to the page, click Submit to apply the changes to the system.
• Click Refresh to update the page with the most current information.
To retain the changes across the switch's next power cycle, click System > Configuration Storage > Save.
Ubiquiti Networks, Inc.
RADIUS Configuration
RADIUS Configuration Fields
Description
The maximum number of times the RADIUS client on the device will retransmit a request packet to a
configured RADIUS server after a response is not received. If multiple RADIUS servers are configured,
the max retransmit value will be exhausted on the first server before the next server is attempted.
A retransmit will not occur until the configured timeout value on that server has passed without a
response from the RADIUS server. Therefore, the maximum delay in receiving a response from the
RADIUS server equals the sum of (retransmit × timeout) for all configured servers. If the RADIUS
request was generated by a user login attempt, all user interfaces will be blocked until the RADIUS
application returns a response.
The number of seconds the RADIUS client waits for a response from the RADIUS server. Consideration
to maximum delay time should be given when configuring RADIUS timeout and RADIUS max
retransmit values.
Used to Enable or Disable the RADIUS accounting mode on the device.
The network access server (NAS) IP address for the RADIUS server.
Click this button to specify the NAS IP address. The address should be unique to the NAS within
the scope of the RADIUS server. The NAS IP address is used only in Access-Request packets.
Click this button to reset the NAS IP Address to the default value.
Managing Device Security
218