PDF user manual for CopperEdge 150

5DGLXV$XWKHQWLFDWLRQEnhanced system security and management of the CopperEdgeuser base is available through Radius authentication. All userand password databases on all CE150s on the network, includingCopperView (SNMP) sessions, can be consolidated on a singleremote Radius server. All login requests for CE150s then goto the Radius server for verification. A second Radius serversupports a Radius accounting function. It keeps a record ofuser and SNMP access for each CE150.1 2 7 (The CopperEdge does not send passwords for SNMP operators(such as Public and Private) in authentication requests.Putting control at a regional or corporate level reduces chancesof unauthorized entry and reduces the complexity of the usermanagementtask. Up to three different server addresses can bespecified for both the authentication server and the accountingserver, enabling virtually 100 percent reliability.1 2 7 (In the CopperEdge implementation of the Radius AccountingFunction, the Radius Attribute Acct-Status-Type, used in the Radiusaccounting function, always has a value of 7 (Accounting On). Sincethe CE system does not utilize a shutdown process, the “AccountingOff” packet (Acct-Status-Type=8) is not supported. Instead, the servershould be configured to treat Accounting On as signifying thebeginning of a new session and the ending of the previous one.3UHSDULQJWR&RQILJXUH&RSSHU(GJHIRU5DGLXV6HUYHUVHere is what you need to implement Radius in the CE150:• You must have at least one Radius Authenticationserver; at least one accounting server is also required toimplement the accounting functions• The IP addresses of your Radius servers must beavailable through the CopperEdge routing table• The Authentication Servers must be pre-configured totranslate objects that are specific to the CopperEdgeproducts, to object names recognized by the server• The final step is to enable the cmRadius authenticationobject on the CopperEdge unit.&RSSHU(GJH,QVWDOODWLRQDQG2SHUDWLQJ*XLGH