User`s manual

MediaPack
SIP User's Manual 296 Document #: LTRT-65408
6. Under section ‘RADIUS Authentication Settings’, in the field ‘Device Behavior Upon
RADIUS Timeout’, select the gateway’s operation if a response isn’t received from the
RADIUS server after the 5 seconds timeout expires:
• Deny Access – the gateway denies access to the Web and Telnet embedded
servers.
• Verify Access Locally – the gateway checks the local username and password.
7. In the field ‘Local RADIUS Password Cache Timeout’, enter a time (in seconds); when
this time expires, the username and password verified by the RADIUS server
becomes invalid and a username and password must be re-validated with the
RADIUS server.
8. In the field ‘Local RADIUS Password Cache Mode’, select the gateway’s mode of
operation regarding the above-mentioned ‘Local RADIUS Password Cache Timer’
option:
• Reset Timer Upon Access – upon each access to a Web screen, the timer resets
(reverts to the initial value configured in the previous step).
• Absolute Expiry Timer - when you access a Web screen, the timer doesn’t reset
but rather continues decreasing.
9. In the field ‘RADIUS VSA Vendor ID’, enter the vendor ID you configured in the
RADIUS server:
10. When using the Web access-level mechanism, perform one of the following options:
• When RADIUS responses include the access level attribute:
In the field ‘RADIUS VSA Access Level Attribute’, enter the code that indicates
the access level attribute in the Vendor Specific Attributes (VSA) section of the
received RADIUS packet.
• When RADIUS responses don’t include the access level attribute:
In the field ‘Default Access Level’, enter the default access level that is applied to
all users authenticated by the RADIUS server.
11. In the field ‘Require Secured Web Connection (HTTPS)’, select ‘HTTPS only’.
It is important you use HTTPS (secure Web server) when connecting to the gateway
over an open network, since the password is transmitted in clear text. Similarly, for
Telnet, use SSL ‘TelnetServerEnable = 2 (refer to Section 12.2.3 on page 289).
12. Save the changes and reset the gateway (refer to Section 5.10.3 on page 206).
After reset, when accessing the Web or Telnet servers, use the username and password
you configured in the RADIUS database. The local system password is still active and can
be used when the RADIUS server is down.