Raritan IP-Reach IPR-M1 User Manual

Also see for IP-Reach IPR-M1: User manual Specifications

Contents

48 IP-R EACH USER M ANUAL- No Limit (default): Each active user can consume as much bandwidth as needed.- 10, 5, 2, or 1 megabit or 512, 256, 128 kilobit: Bandwidth consumed by each active userduring the operation of this IP-Reach unit is limited to the selected quantity. The lower thebandwidth allowed, the slower the performance that may result.Press <Ctrl+S> to save changes or <Esc> to cancel changes, and return to Configuration Menu. SavedPerformance Settings changes will not take effect until IP-Reach is restarted.Important: The details of the next two sections:Remote Authentication: Users, Groups, andAccess Permissions andRemote Authentication Implementation have changed drastically fromversion 3.1. Please read these sections carefully.Remote Authentication: Users, Groups, and AccessPermissionsOverviewIP-Reach keeps an internal list of user and group names to determine access authorization and permissions.This information is stored internally in a hashed / encrypted format.Note to CommandCenter UsersIf you plan to configure IP-Reach to be integrated with and controlled by Raritan’s CommandCentermanagement appliance, this section of the User Manual does not apply to you. When an IP-Reach unit iscontrolled by CommandCenter, CommandCenter determines the allowed users and groups. Please refer toyour CommandCenter User Guide.Note to Raritan Customers Upgrading from Previous Firmware VersionsIf you previously configured Raritan products such as Dominion KSX and IP-Reach running legacyfirmware versions earlier than v3.2, read this entire section carefully. Beginning with firmware version v3.2and above, the implementation of users and groups has changed significantly to provide more flexible andpowerful configurations.Relationship between Users and Group EntriesIP-Reach organizes all users into groups. Assigning users to groups allows you to manage permissions forall users in a given group at once, instead of managing permissions on a user-by-user basis.• User information is used to determine user authentication (i.e., is a given user allowed to access IP-Reach at all?)• Group information is used to determine authorization for all users in a given group (i.e., to whichports on IP-Reach do the users in a group have access rights?)You may choose not to associate specific users with groups. In this case, IP-Reach classifies the user as“Individual.”Mandatory User GroupsEvery IP-Reach has three default user groups. These groups cannot be deleted:ADMIN User group for original, factory-default administrative user.NONE Permissions defined for this group are employed for a user when your IP-Reach isconfigured for remote authentication via LDAP or RADIUS (see next section), and alogin attempt is successful but no user group is returned by the remote authenticationserver.UNKNOWN Permissions defined for this group are employed for a user when your IP-Reach isconfigured for remote authentication via LDAP or RADIUS (see next section), and alogin attempt is successful but the user group returned by the remote authenticationserver is not found in IP-Reach.