AKCP FreeRADIUS SP+ Manual de usuario

www.AKCP.com

SP+ Radius User Manual

- 2 -

Table of Contents

Introduction ..............................................................................................................3

Setting up Radius on the sensorProbe+...................................................................4

1. Enable the Radius Server authentication ..................................................4

2. Set up the connection in the sensorProbe+ Web UI..................................7

How it works.............................................................................................................11

Authorization and Privilege Level checking...................................................11

Authentication................................................................................................13

Accounting.....................................................................................................14

Primary, Secondary Server and the Fail-over algorithm................................16

Troubleshooting .......................................................................................................17

SP+ Radius User Manual

- 3 -

Introduction

What is RADIUS

Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides

centralized Authentication, Authorization, and Accounting (AAA) management for computers to

connect and use a network service.

This is a feature that we’ve added to the sensorProbe+ web interface so that the unit can be

accessed securely through a Radius Server running on the Local Area Network. It is used to:

A. To authenticate users or devices before granting them access to the units web

interface,

B. To authorize those users or devices for access the the units web interface.

C. Accounting is the process of generating log files that record session statistics used

for billing, system diagnosis, and usage planning.

Implementation

The sensorProbe+ implements Radius Authentication(RFC 2865) and Accounting(RFC 2866)

via the web interface. It means that only log in or log off via the web interface can be

authenticated (and logged) with the Radius Server.

As of firmware 5937 it is possible to define specific attributes for each user at the server side to

check whether the user has administrator rights or just a simple user (privilege level checking).

All Radius users which doesn’t have the privilege level attributes set, will only have Viewer level

(read-only) access to the SP+ web UI (for details, see the section How it works).

IPv6 information

In this manual we’ll only show the configuration using IPv4 addressing, but the sensorProbe+

also supports Radius with IPv6. The only difference is the IP address format; everything else in

the configuration is identical with IPv4.

SP+ Radius User Manual

- 4 -

Setting up Radius on the sensorProbe+

1. Enable the Radius Server authentication

First log in to the sensorProbe+ as an Administrator (Admin user).

Then navigate to the Settings page >> Password Checking and turn it on as shown in the

screen shot above. Depending on your setup, you may have password checking enabled

already.

Scroll down on the page for the Radius settings:

By default Radius is disabled.

SP+ Radius User Manual

- 5 -

Enable the Radius password checking on the sensorProbe+ by choosing the Radius Mode:

▪Authentication: usernames and passwords will be ONLY checked with Radius server

▪Authentication and Accounting: as above but also log the access data on the server

The most important parameters for the configuration are:

1. IP Address of the Radius server

2. Shared Secret

3. Port (if it’s different than the default 1812 and 1813)

Before saving your settings, make sure that you test them (see below).

SP+ Radius User Manual

- 6 -

You can also

specify secondary

servers for

redundancy (both

for Authentication

and Accounting),

but if you only have

one server just use

the Primary

server’s options

and leave the

Secondary settings

at default.

Scroll down the

screen to enter the

Secondary server

options, or leave

them at default

settings.

See below in this

manual for

information about

the algorithm used

for the failover.

SP+ Radius User Manual

- 7 -

2. Set up the connection in the sensorProbe+ Web UI

Specify the parameters for the Radius Primary Authentication Server.

Now you need to enter the IP address of the server machine, the port and the shared secret,

then click on the “Test Request” button which will bring up the dialog box as shown in the

screen shot below:

Enter the Username and Password of a valid Radius user and click the “Send Testing Request”

button.

SP+ Radius User Manual

- 8 -

If the Radius server is running, the settings and the login details are correct, you will receive the

“Successful” notification as shown in the screen shot above.

If you get an error popup, check that the server settings are correctly set up in the configuration

for the Authentication server, and that the user name and password is correct.

Verify that the network subnet is allowed in the Radius configuration (ACL).

Also, check for any firewall or network routing problem that might prevent successful

communication with the Radius server.

Note: The Radius user names are case-sensitive!

SP+ Radius User Manual

- 9 -

Press the Save button to save the settings if the test was successful.

Simply repeat the same steps to connect to an Accounting server.

Accounting is optional and you don’t need to specify it if you select only Authentication mode.

Note: It is recommended to confirm the server settings with a test, since you won’t be able to log

in again if your settings are wrong.

SP+ Radius User Manual

- 10 -

The system will then log you out of the web interface and connect to the Radius server for

password checking.

Now you can log into the web interface using only the Radius usernames and passwords.

However, the built-in local Admin user will always be available to use.

Also, the unit falls back to local authentication mode if a Radius server is unreachable.

All Radius users which doesn’t have the privilege level attributes set, will only have Viewer level

(read-only) access to the SP+ web UI (for details, see the section How it works).

Important Note: If you happen to get logged out of the unit while setting up the Radius server

or do not want to use the Radius server to log in, you can press the reset button on the unit for 8

seconds. This disables all password checking functions. Wait about 10 seconds then you should

be able to open the web UI without any passwords.

Tabla de contenidos

Otros manuales de Instrumento de medición de AKCP

AKCP

AKCP sensorProbe2 Manual de usuario

AKCP

AKCP PMS120-CT50 Manual de usuario

AKCP

AKCP SP1+ Manual de instrucciones

AKCP

AKCP SP1+ Manual de usuario

AKCP

AKCP SensorProbe2 PLUS Manual de referencia

AKCP

AKCP ILPM Manual de usuario

AKCP

AKCP Inline Power Meter AC Manual de usuario

AKCP

AKCP sensorProbe8 Manual de usuario

AKCP

AKCP SPX+ Manual de referencia

Manuales populares de Instrumento de medición de otras marcas

Suaoki

Suaoki D40 Manual de usuario

Elster

Elster BK-G1.6 Manual de usuario

Endress+Hauser

Endress+Hauser Deltabar FMD71 Manual

Duratool

Duratool D03128 Manual de usuario

Vega

Vega VEGAPULS 65 Manual de usuario

Tonghui

Tonghui TH2618B Manual de usuario

Tenmars

Tenmars TM-801 Manual de usuario

MSR

MSR 145 Manual de usuario

TPS

TPS WP-82 Manual de usuario

ELMETRON

ELMETRON CP-511 Manual de usuario

PCB Piezotronics

PCB Piezotronics 003C30 Manual de usuario

Tenma

Tenma 72-10465 Manual de usuario

Endress+Hauser

Endress+Hauser Proline Promag 50 Especificaciones técnicas

Siemens

Siemens SITRANS F Coriolis FCT030 Manual de lista de piezas

KLINGER

KLINGER CMF V Series Manual de usuario

EXFO

EXFO FTB-2 Manual de operación y mantenimiento

Keysight

Keysight M8290A Manual de usuario

ADTEK

ADTEK MW-5 Manual de usuario