User`s manual

SIP User's Manual 13. Security
Version 5.0 297 October 2006
7. In the field ‘Local RADIUS Password Cache Timeout’, enter a time (in seconds); when
this time expires, the username and password verified by the RADIUS server
becomes invalid and a username and password must be re-validated with the
RADIUS server.
8. In the field ‘Local RADIUS Password Cache Mode’, select the gateway’s mode of
operation regarding the above-mentioned ‘Local RADIUS Password Cache Timer’
option:
• Reset Timer Upon Access: upon each access to a Web screen, the timer resets
(reverts to the initial value configured in the previous step).
• Absolute Expiry Timer: when you access a Web screen, the timer doesn’t reset
but rather continues decreasing.
9. In the field ‘RADIUS VSA Vendor ID’, enter the vendor ID you configured in the
RADIUS server:
10. When using the Web access-level mechanism, perform one of the following options:
• When RADIUS responses include the access level attribute:
In the field ‘RADIUS VSA Access Level Attribute’, enter the code that indicates
the access level attribute in the Vendor Specific Attributes (VSA) section of the
received RADIUS packet.
• When RADIUS responses don’t include the access level attribute:
In the field ‘Default Access Level’, enter the default access level that is applied to
all users authenticated by the RADIUS server.
11. In the field ‘Require Secured Web Connection (HTTPS)’, select ‘HTTPS only’.
It is important you use HTTPS (secure Web server) when connecting to the gateway
over an open network, since the password is transmitted in clear text. Similarly, for
Telnet, use SSL ‘TelnetServerEnable = 2 (refer to Section 13.2.3 on page 291).
12. To save the changes, refer to Section 5.9.2 on page 124.
13. Reset the gateway (Section 5.9.3 on page 125).
After reset, when accessing the Web or Telnet servers, use the username and password
you configured in the RADIUS database. The local system password is still active and can
be used when the RADIUS server is down.
¾ To configure RADIUS support on the gateway using the ini file:
 Add the following parameters to the ini file. For information on modifying the ini file,
refer to Section 6.2 on page 127.
• EnableRADIUS = 1
• WebRADIUSLogin = 1
• RADIUSAuthServerIP = IP address of RADIUS server
• RADIUSAuthPort = port number of RADIUS server, usually 1812
• SharedSecret = your shared secret'
• HTTPSOnly = 1
• BehaviorUponRadiusTimeout = 1
• RadiusLocalCacheMode = 1
• RadiusLocalCacheTimeout = 300
• RadiusVSAVendorID = your vendor’s ID
• RadiusVSAAccessAttribute = code that indicates the access level attribute
• DefaultAccessLevel = default access level (0 to 200)