Eaton Network-MS User Manual

Also see for Network-MS: Quick start guide

Contents

www.eaton.comNetworkManagement Card(Network-MS)User ManualNetwork Management Card – User Manual 34003991XT_EN/JC Page 55/143• Enable Configuration: If enabled, this server will be used during radius authentication process.• Primary/Secondary: identifies the priority order between Radius servers. The primary is used in first (ifenabled) , if it is unreachable, the secondary is used.• Radius Server: identifies the name or the IP (IPv4 or IPv6) address of the server.• Secret:identifies the secret shared between the card and the Radius Server• NAS IP Address: identifies the IP address of the NAS (the Network Management Card) to use. Thepossible values in the GUI list are based on the IPv4 and IPv6(s) addresses of the card.• Auth. Port: identifies the remote radius server port.• Time Out: identifies the delay to wait before to send another radius request.• Retry Number: identifies the number of request to send before testing another Radius server (ifavailable).4.4.2.2 Authorization managementAfter an authentication success, the card must check if the user has the permission to open a (admin) session.Two radius attributes are used to manage admin authorization:• An IETF attribute: Service-Type (6)• An Eaton Vendor Specific Attribute (534): Eaton-UserLevel (28)If one of these attribute is present with the value as defined in the following table the access of the card isallowed, else the access is refused:Attribute Definition Value for AdminAuthorizationIETF Attribute Name Attribut IDService-Type 6 6Vendor Specific Attribute Name Vendor ID Attribut ID1Eaton-UserLevel 534 28