Eaton Network Management Card Uživatelský manuál stáhnout pdf (Strana 55)

www.eaton.com

Network

Management Card

(Network-MS)

User Manual

Network Management Card – User Manual 34003991XT_EN/EG Page 55/142

 Enable Configuration: If enabled, this server will be used during radius authentication process.

 Primary/Secondary: identifies the priority order between Radius servers. The primary is used in first (if

enabled) , if it is unreachable, the secondary is used.

 Radius Server: identifies the name or the IP (IPv4 or IPv6) address of the server.

 Secret:identifies the secret shared between the card and the Radius Server

 NAS IP Address: identifies the IP address of the NAS (the Network Management Card) to use. The

possible values in the GUI list are based on the IPv4 and IPv6(s) addresses of the card.

 Auth. Port: identifies the remote radius server port.

 Time Out: identifies the delay to wait before to send another radius request.

 Retry Number: identifies the number of request to send before testing another Radius server (if

available).

4.4.2.2 Authorization management

After an authentication success, the card must check if the user has the permission to open a (admin) session.

Two radius attributes are used to manage admin authorization:

 An IETF attribute: Service-Type (6)

 An Eaton Vendor Specific Attribute (534): Eaton-UserLevel (28)

If one of these attribute is present with the value as defined in the following table the access of the card is

allowed, else the access is refused:

Attribute Definition

Value for Admin

Authorization

IETF Attribute Name

Attribut ID

Service-Type

Vendor Specific Attribute Name

Vendor ID

Attribut ID

Eaton-UserLevel

534

1 2 ... 50 51 52 53 54 55 56 57 58 59 60 ... 141 142

Žádné komentáře

Eaton Network Management Card Uživatelský manuál Strana 55