User's Manual

86 Working with Base Stations from Your PC TB9300 Installation and Operation Manual

5.2.7 Setting Up Authentication

Connections to the base station can be authenticated by a remote

(i.e. centralized) service (Tools > Settings > Authentication). Two remote

authentication protocols are supported: LDAP and RADIUS.

Notice Only people experienced with the AAA architecture and

authentication protocols should make changes on this page.

Moving logins to a centralized server can provide enhanced security for a

number of reasons, such as:

■ less work is required to manage password-controlled access to all base

stations in a network; you no longer need to change the password in

each base station individually

■ previously used passwords may be excluded from re-use

■ access can be denied after a set number of incorrect passwords is

entered

■ passwords can be set to expire on a certain date

■ remote access to base stations can be globally enabled and disabled as

required for technical staff during the commissioning process.

Once the centralized server logins are set up, we recommend that only one

local administrator login is left on the base station for emergency use

(e.g. when the connection to the server is lost). The password for this

emergency login should be kept secret.

Notice Unless they are deleted, any local logins left on the base sta-

tion will still work and have priority over remote logins.