Tripp Lite PDU3VSR6L2130 Owner's Manual for SNMPWEBCARD 9332CE - Page 21

Authorization Scheme, Accounting Scheme, Address, Priority, Shared Secret, Authentication Port,

Page 21 highlights

3. Web Console continued 3.8 Preferences continued 3.8.3 Preferences > Security continued ACL IP Mask (Users with SNMP Access Only) This defines the Subnet Mask to use with the ACL IP Address to determine if an address is one from which the user is allowed to access the data via SNMP. • RADIUS Then Local The system uses RADIUS for authentication first, if not authorized via the RADIUS server, the locally defined users will be used for authentication. 192.168.1.1 (single) 255.255.255.255 192.168.1.0 (range) 255.255.255.0 192.168.0.0 255.255.0.0 192.0.0.0 255.0.0.0 * (everyone) 0.0.0.0 Password (N/A for SNMPv1 or SNMPv2c) This is the user password for logging in. For SNMPv3 users, this is also the Priv Password. Auth Password (N/A for SNMPv1 or SNMPv2c) For SNMPv3 Users only, this is the Auth Password. Idle Timeout in Minutes (N/A for SNMPv1 or SNMPv2c) This applies to data access other than SNMP which does not use the concept of a logged in session. This is the amount of time that the session can be idle before it will time out and no longer have access to the data. When the value is 0, an idle session will not time out. Session Expiration Minutes (N/A for SNMPv1 or SNMPv2c) This applies to data access other than SNMP which does not use the concept of a logged in session. This is the amount of total time that a session may last whether or not the session is idle or active. When the value is 0, the session will not expire. AAA Preferences Authorization Scheme The authorization scheme defines how user authentication will be done. The authorization can be done with locally defined users only, RADIUS server defined users only or a combination of the two. The valid values are: • Local Only The system only uses locally defined user definitions. Figure 3-35: AAA Preferences Accounting Scheme This defines where the user session accounting data will be recorded. Like the authorization, the data can be recorded locally or on the RADIUS server or a combination of the two. The valid values are: • Local Only Use only the local system to record the session accounting data. • RADIUS Only Uses only the RADIUS servers defined to record the session accounting data. • Local Then RADIUS Try to record the session accounting data locally and if not able to, then try to record to RADIUS. • RADIUS Only The system uses RADIUS only for authentication. • Local Then RADIUS The system uses locally defined user definitions first. If the user data is not found, it uses RADIUS for authentication. • RADIUS Then Local Try to record the session accounting data on RADIUS first and if fails, then record locally. RADIUS Servers Address This defines the internet address of the RADIUS server. Priority This is a number that defines the priority of this RADIUS server Shared Secret This is the shared secret value to be used with this RADIUS server. Authentication Port This defines the port on the server to be used for authentication. Accounting Port This defines the port on the server to be used for accounting. 21

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100

21
3. Web Console
continued
3.8 Preferences
continued
3.8.3 Preferences > Security
continued
ACL IP Mask (Users with SNMP Access Only)
This defines the Subnet Mask to use with the ACL IP Address to determine
if an address is one from which the user is allowed to access the data
via SNMP.
192.168.1.1 (single) 255.255.255.255
192.168.1.0 (range)
255.255.255.0
192.168.0.0
255.255.0.0
192.0.0.0
255.0.0.0
* (everyone)
0.0.0.0
Password (N/A for SNMPv1 or SNMPv2c)
This is the user password for logging in. For SNMPv3 users, this is also
the Priv Password.
Auth Password (N/A for SNMPv1 or SNMPv2c)
For SNMPv3 Users only, this is the Auth Password.
Idle Timeout in Minutes (N/A for SNMPv1 or SNMPv2c)
This applies to data access other than SNMP which does not use the
concept of a logged in session. This is the amount of time that the
session can be idle before it will time out and no longer have access to
the data. When the value is 0, an idle session will not time out.
Session Expiration Minutes (N/A for SNMPv1 or SNMPv2c)
This applies to data access other than SNMP which does not use the
concept of a logged in session. This is the amount of total time that a
session may last whether or not the session is idle or active. When the
value is 0, the session will not expire.
AAA Preferences
Authorization Scheme
The authorization scheme defines how user authentication will be done. The
authorization can be done with locally defined users only, RADIUS server
defined users only or a combination of the two.
The valid values are:
• Local Only
The system only uses locally defined user definitions.
• RADIUS Only
The system uses RADIUS only for authentication.
• Local Then RADIUS
The system uses locally defined user definitions first.
If the user data is not found, it uses RADIUS for authentication.
• RADIUS Then Local
The system uses RADIUS for authentication first, if not authorized
via the RADIUS server, the locally defined users will be used for
authentication.
Figure 3-35: AAA Preferences
Accounting Scheme
This defines where the user session accounting data will be recorded.
Like the authorization, the data can be recorded locally or on the RADIUS
server or a combination of the two. The valid values are:
• Local Only
Use only the local system to record the session accounting data.
• RADIUS Only
Uses only the RADIUS servers defined to record the session
accounting data.
• Local Then RADIUS
Try to record the session accounting data locally and if not able to,
then try to record to RADIUS.
• RADIUS Then Local
Try to record the session accounting data on RADIUS first and if fails,
then record locally.
RADIUS Servers
Address
This defines the internet address of the RADIUS server.
Priority
This is a number that defines the priority of this RADIUS server
Shared Secret
This is the shared secret value to be used with this RADIUS server.
Authentication Port
This defines the port on the server to be used for authentication.
Accounting Port
This defines the port on the server to be used for accounting.