User Manual

UPS Network Management Card 3 User Guide43
If RADIUS Only is selected, and the RADIUS server is unavailable, improperly identified, or
improperly configured, remote access is unavailable to all users. To regain access, you
must use a serial connection to the command line interface and change the access setting
to local or radiusLocal.
For example, the command to change the access setting to local would be:
radius -a local
See also “RADIUS screen” below and “Configuring the RADIUS Server”.
RADIUS screen
Path: Configuration > Security > Remote Users > RADIUS
You can use a RADIUS server to authenticate remote users.Use this option to do the following:
• List the RADIUS servers (a maximum of two) available to the NMC and the time-out period for each.
• Configure the authentication parameters for a new or existing RADIUS server by clicking on a Radius
Server link.
See also “Remote Users authentication” above and “Configuring the RADIUS Server” below.
Configuring the RADIUS Server
Summary of the configuration procedure.
You must configure your RADIUS server to work with the NMC, see the steps below.
For examples of the RADIUS users file with Vendor Specific Attributes (VSAs) and an example of
an entry in the dictionary file on the RADIUS server, see the Security Handbook, available on the
APC website.
1. Add the IP address of the NMC to the RADIUS server client list (file).
2. Users must be configured with Service-Type attributes unless Vendor Specific Attributes (VSAs) are
defined. If no Service-Type attributes are configured, users will have read-only access (on the UI only).
RADIUS Setting Description
RADIUS Server
The server name or IP address (IPv4 or IPv6).
NOTE: RADIUS servers use port 1812 by default to authenticate users. To use
a different port, add a colon followed by the new port number to the end of the
RADIUS server name or IP address. The NMC supports ports 1812, 5000 to
32768.
Secret The shared secret between the RADIUS server and the NMC.
Reply Timeout
The time in seconds that the NMC waits for a response from the RADIUS
server.
Test Settings
Enter the Administrator user name and password in order to test the RADIUS
server path that you have configured.
Skip Test and
Apply
Do not test the RADIUS server path.