NETGEAR XS712T-100NES Switch User Manual


 
173
XS712T Smart Switch
RADIUS Configuration
RADIUS servers provide additional security for networks. The RADIUS server maintains a
user database, which contains per-user authentication information. The switch passes
information to the configured RADIUS server, which can authenticate a user name and
password before authorizing use of the network. RADIUS servers provide a centralized
authentication method for:
W
eb Access
Access Con
trol Port (802.1X)
The RADIUS folder contains links described in the
following sections.
Global Configuration
RADIUS Server Configuration
Accounting Server Configuration
Global Configuration
Use the RADIUS Configuration screen to add information about one or more RADIUS
servers on the network.
To configure global RADIUS server settings:
1. Select Security
Management Security RADIUS Global Configuration.
The Current Server IP Address field is blank if no servers are configured (see RADIUS
Server Configuration o
n page 174). The switch supports up to three configured RADIUS
servers. If more than one RADIUS servers are configured, the current server is the server
configured
as the primary server. If no servers are configured as the primary server, the
current server is the most recently added RADIUS server.
2. In the
Max Number of Retransmits field, specify the value of the maximum number of times
a request packet is retransmitted to the RADIUS server.
Consideration to maximum delay time should be given when configuring RADIUS maximum
retransmit and
RADIUS timeout. If multiple RADIUS servers are configured, the maximum
retransmit value on each will run out before the next server is attempted. A retransmit will not
occur until the configured timeout value on that server has passed without a response from
the RADIUS server. Therefore, the maximum delay in receiving a response from the RADIUS
application equals the product of (retransmit times timeout) for all configured servers. If the
RADIUS request was generated by a user login attempt, all user interfaces will be blocked
until the RADIUS application returns a response.