7. Administration (continued)
7.2.3 Remote OSD Administration Tab (continued)
ANMS
The Advanced Network Management Settings (ANMS) screen allows you to set up login authorization management from an external source. From this screen, administrators can set up remote management via RADIUS and/or LDAP/S, and set up the access port and MAC address for the
ANMS - RADIUS
To allow authorization through a RADIUS server, do the following:
1.Check the Enable RADIUS checkbox.
2.Fill in the Primary RADIUS Server IP and access Port, and the Alternate RADIUS Server IP and access Port.
3.In the Timeout (seconds) field, set the time in seconds that the
KVM waits for a reply from the RADIUS server before it times out.
4.In the Retries field, enter the number of times you want the KVM to try and reconnect with the RADIUS server before it gives up.
5.In the Shared Secret field, key in the character string that you want to use for authentication between the KVM and the RADIUS
Server.
On the RADIUS server, set the access rights for each user according to the information in the table:
Character | Description |
|
|
C | Gives the corresponding account administrator privileges. |
WGives the corresponding account access to the KVM switch via the Windows browser and
JGives the corresponding account access to the KVM switch via the Java browser and
LGives the corresponding account access to the log server on the Web Management Interface.
VGives the corresponding account
PN/xxxx | Denies the corresponding account access to a port. |
|
|
SN/xx | Denies the corresponding account access to a station. |
|
|
PV/xxxx | Gives the corresponding account |
| port. |
|
|
SV/xx | Gives the corresponding account |
| station. |
|
|
PF/xxxx | Gives the corresponding account full access to a port. |
|
|
SF/xx | Gives the corresponding account full access to a station. |
RADIUS Server access rights examples are given in the following table:
RADIUS |
|
Access |
|
Rights | Description |
CThe corresponding account has administrator access to the KVM.
W, J, L | The corresponding account can access the system |
| via the Windows and Java browser and |
| applications, and can access the log server on the Web |
| Management Interface. |
|
|
PN/0102 | The corresponding account is denied access to port 2 on |
| station 1. |
|
|
PF/A | The corresponding account is given full access to all |
| ports on the installation. |
|
|
SV/02 | The corresponding account is given |
| station 2. |
Note: Characters are not case sensitive. Characters are comma delimited.
ANMS – LDAP/S
34