RADIUS Authentication Parameters

RADIUS authentication parameters are used to configure RADIUS authentication.

The following table lists the RADIUS authentication parameters:

Parameter Default Description
RADIUS-Enabled False Defines whether all user ID and password authentications use the RADIUS protocol.

The value of true indicates that all user ID and password authentications use the RADIUS protocol.

The value of false indicates that the RADIUS protocol is not used.

The following parameters are available only when the RADIUS-Enabled parameter is set to true:
RADIUS-BackupAdapterIP No default Defines the binding adapter IP address of the backup RADIUS host.
RADIUS-BackupHost No default Defines the IP address or name of the backup RADIUS host.
RADIUS-BackupPort No default Defines the port of the backup RADIUS host.
RADIUS-BackupSecret No default Defines the backup RADIUS server secret.
You must set this parameter before performing RADIUS authentication.
Note: This parameter can only be set by using the dbsettings utility; it cannot be set manually.
RADIUS-PrimaryAdapterIP No default Defines the binding adapter IP address of the primary RADIUS host.
RADIUS-PrimaryHost No default Defines the IP address or name of the primary RADIUS host.
RADIUS-PrimaryPort No default Defines the port of the primary RADIUS host.
RADIUS-PrimarySecret No default Defines the primary RADIUS server secret.

You must set this parameter before performing RADIUS authentication.

Note: This parameter can only be set by using the dbsettings utility; it cannot be set manually.
RADIUS-SpecialUsers No default Defines users that will not be authenticated by the RADIUS protocol.

It is good practice to add one user (administrator) that is not authenticated by RADIUS.

RADIUS-Synchronous True Defines whether communication to primary and backup RADIUS servers is synchronous or asynchronous.

True: Indicates that the RADIUS authentication is synchronous. Communication to the backup RADIUS host is only performed if communication to the primary RADIUS host times out.

False: Indicates that the RADIUS authentication is asynchronous. Requests are made to both the primary RADIUS and backup RADIUS hosts at the same time. MFT uses the first response that is received.

Note: This parameter is ignored if no backup RADIUS server is defined.
RADIUS-Timeout 10 Defines the RADIUS authentication timeout in seconds.

If a response is not received in this amount of time, the request fails.