RADIUS Settings.

To allow authentication and authorization for the KVM switch through a RADIUS server:

1.Check Enable.

2.Enter the IP addresses and service port numbers for the Preferred and Alternate RADIUS servers. Use the IPv4 address, the IPv6 address or the domain name in the IP fields.

3.In the Timeout field, set the time in seconds that the KVM switch waits for a RADIUS server reply before it times out.

4.In the Retries field, set the number of allowed RADIUS retries.

5.In the Shared Secret field, key in the character string that you want to use for authentication between the KVM switch and the RADIUS Server. A minimum of 6 characters is required.

6.On the RADIUS server, Users can be authenticated with any of the following methods:

Set the entry for the user as su/xxxx. (xxxx represents the Username given to the user when the account was created on the KVM switch.)

Use the same Username on both the RADIUS server and the KVM switch.

Use the same Group name on both the RADIUS server and the KVM switch.

Use the same Username/Group name on both the RADIUS server and the KVM switch.

Assign the same user access rights that were assigned when the User of Group was created on the KVM switch. See “Adding Users” on page 60.

LDAP / LDAPS Authentication and Authorization Settings.

To allow authentication and authorization for the KVM switch via LDAP / LDAPS:

Item

Action

Enable

Put a check in the Enable checkbox to allow LDAP / LDAPS authentication and

 

authorization.

 

 

Type

Click a radio button to specify whether to use LDAP or LDAPS.

 

 

LDAP Server IP

Fill in the IP address and port number for the LDAP or LDAPS server.

and Port

• Use the IPv4 address, the IPv6 address or domain name in the LDAP Server field.

 

• For LDAP, the default port number is 389; for LDAPS, the default port number is 636.

 

 

Admin DN

Consult the LDAP / LDAPS administrator to ascertain the appropriate entry for this field. For

 

example, the entry might look like this:

 

ou=kn4132,dc=aten,dc=com

 

 

Admin Name

Key in the LDAP administrator's username.

 

 

Password

Key in the LDAP administrator's password.

 

 

Search DN

Set the distinguished name of the search base. This is the domain name where the search

 

starts for user names.

 

 

Timeout

Set the time in seconds that the KVM switch waits for an LDAP or LDAPS server reply

 

before it times out.

 

 

72

KVM Switch KVM2132P, KVM2116P, KVM1116P User Manual

Page 84
Image 84
Schneider Electric KVM2132P, KVM2116P, KVM1116P user manual Radius Settings