Hardware manual
Group Administration Group security
4–10
Procedure for configuring RADIUS servers
1. Click Group, then Group Configuration, and then the Administration tab.
2. Click
RADIUS settings. The RADIUS Settings dialog box appears.
3. Under RADIUS authentication servers click Add and specify the IP address of the server.
4. Specify and then confirm the RADIUS
secret.
5. [OPTIONAL] Specify server timeout and retry values:
•
Request timeout, seconds — Number of seconds the group waits for an accounting server to
transmit before timing out. The default is two seconds.
•
Number of retries — Number of times the group tries to contact an accounting server after the first
failure. The default is one.
6. [OPTIONAL] Using the Radius accounting servers panel, repeat steps 2 through 5 if you also want to add
information for RADIUS accounting servers.
7
. Repeat steps 3 through 6 to add additional servers or click
OK to finish.
8. In the Group Administration window, click
Save all changes (Control+S).
All RADIUS authentication and accounting options are now enabled. For a
description of these options, see
Displaying RADIUS authentication and accounting servers on pag
e 4-9.
Modifying RADIUS server settings
You can change these settings for a RADIUS authentication or accounting server:
• Server IP address
• Password (secret)
• Request timeout value
Configure iSCSI CHAP
accounts.
For iSCSI CHAP accounts, add each configured network interface on all the group members
as a RADIUS client. Specify the network interface IP address and, optionally, a password
(or secret), up to 63 characters. If you specify a password, enter this password when you
configure the group to use the RADIUS authentication server. Dell recommends that you
use a password for increased security.
Set up attributes for
administration accounts.
For administration accounts, set up the attributes that allow the server to authorize accounts
as group adminis
t
rator, pool administrator, or read-only accounts. See RADIUS attributes
for administration accounts on
pag
e 4-7.
Set up accounts. Set up the accounts. You can set up accounts on the RADIUS se
rver or a different resource,
such as Active Directory. The RADIUS server verifies login credentials (account name and
password) that the user supplies against these accounts.
Table 4-7: RADIUS Server Prerequisites (Continued)
Task Description