Health Tab - Network Critical SmartNA-X User Manual

W U -I R
EB SER NTERFACE EFERENCE
Table B-11 Security tab options
Option
Authenticate users via
NTP Server
RADIUS authentication Allows you to specify options for configuring authentication via a RADIUS authentication server. Click
TACACS+
authentication
RADIUS accounting

Health tab

The Health tab
and state of the SmartNA-X system, and includes details of the hardware and firmware revisions, model and serial
| H
EALTH TAB
Description
Specifies how users should be authenticated when logging in. The options are:
Local – Users are authenticated locally by the system.
RADIUS – Users are authenticated by a RADIUS server.
RADIUS/Local – Users will be authenticated by a RADIUS server if access to the server is available,
falling back to local authentication if access to a RADIUS server is not available.
TACACS+ – Users are authenticated by a TACACS+ server.
TACACS+/Local – Users will be authenticated by a TACACS+ server if access to the server is available,
falling back to local authentication if access to a TACACS+ server is not available.
Specifies the IP address of a NTP (Network Time Protocol) server. System time will be synchronized with
the NTP server when specified.
Add server to set up a new server, or click the edit options to update an existing server. The system will
attempt to contact the first RADIUS server in the list, and move on to the next server if it is inaccessible.
Servers can be ordered by dragging with the
The following options are available when configuring RADIUS authentication servers:
Server address – IPv4 address of the RADIUS server (hostnames not supported). A given server (IP
address) has only a single shared secret. This means, if the same server is listed for both authentication and
accounting, and the user changes the shared secret via one of them, the shared secret for the other is
implicitly changed to match.
Server port – RADIUS UDP request port. RADIUS uses 1812 for Authentication and 1813 for
Accounting, although some older servers use ports 1645 and 1646 (authentication and accounting,
respectively). Check settings on the server to confirm which ports to use.
Shared secret – A text string that serves as a password between SmartNA-X and the RADIUS server.
When creating and using a shared secret for use by SmartNA-X, you must:
• use the same case-sensitive shared secret on both RADIUS server and SmartNA-X device.
• use a different shared secret for each RADIUS server-RADIUS client pair.
• use alphanumeric characters only (no spaces allowed).
Allows you to specify options for configuration authentication via a TACACS+ authentication server.
Click Add server to set up a new server, or click the edit options to update an existing server. The system
will attempt to contact the first TACACS+ server in the list, and move on to the next server if it is
inaccessible. Servers can be ordered by dragging with the
Server address – IPv4 address of the TACACS+ server (hostnames are not supported).
Shared secret – TACACS+ shared secret text string between the SmartNA-X device and the TACACS+
server host. The secret entered here must match that used by the server. When creating and using a shared
secret for use by SmartNA-X, you must:
• use the same case-sensitive shared secret on both TACACS+ server and SmartNA-X device.
• use the same shared secret for each TACACS+ server-TACACS+ client pair.
• use alphanumeric characters only (no spaces allowed).
Allows you to specify options for configuring a RADIUS accounting server. Adding an accounting server
implicitly enables logging. Click Add server to set up a new server, or click the edit options to update an
existing server. The system will attempt to contact the first RADIUS server in the list, and move on to the
next server if it is inaccessible. Servers can be ordered by dragging with the
(Figure B-6) is available after clicking on the chassis. It provides information for the overall health
S NA™ 10G N
MART
button.
button.
DRAFT
A (S NA-X)
ETWORK CCESS MART
button.
200