NMC-RX 7.2.x User Guide, Vol. 1 > Configuring Security Settings > Configuring User Authentication Settings

Configuring User Authentication Settings

Only users with security privileges can configure user authentication settings. You can set either RADIUS authentication or local database authentication as the default mode of user login authentication.

For RADIUS authentication, you specify a list of RADIUS servers to authenticate user logins and set the order in which they are queried. You configure RADIUS authentication on a per user basis when you create user profiles (see Setting SSH Username Source for more information).

To configure user authentication settings:

1. From the Configuration menu in either the Network Workshop or the Device Workshop, select NMC-RX Application Settings, then click NMC-RX User Authentication.

The NMC-RX User Authentication tab appears in the work area.

2. Set the user authentication parameters (Table 30).

 Table 30:  User Authentication Parameters 

 Parameter
 Description

 Default User Authentication Mode

 Method by which user logins are authenticated: either locally or with a RADIUS server by default.


 RADIUS Authentication Servers

 List of RADIUS authentication servers that are available to authenticate NMC-RX user logins.
 List is sorted in the order that the servers are used when a user authentication takes place. When a server fails to respond with an acceptance, rejection, or challenge, the next server in the list is tried.
 To add or remove a server from the list, click the Add/Remove Server button (see Related Dialog Box).
 Select a server from the list, and click the Move Up and Move Down buttons to change the order in which the servers are checked. 


 Server Properties

 Server Name

 Name of the selected RADIUS server; cannot edit


 IP Address

 IP address of the selected RADIUS server; cannot edit


 UDP Port

 UDP port of the selected RADIUS server; cannot edit


 Retry Count

 Number of times to retry the selected RADIUS server; range 0-16; default 3


 Timeout (sec)

 Time to wait to receive a response from the selected RADIUS server; range 3-30; default 3


 Secret

 String that is known by the server and the client used to obfuscate the packets that are exchanged between the server and client; range 0-32 characters; default is empty



 

3. Click the Save button.

The default user authentication settings are saved.

Related Dialog Box

Add/Remove RADIUS Authentication Servers

The Add/Remove RADIUS Authentication Servers dialog box appears when you click the Add/Remove Server button on the User Authentication Settings tab.

The Available Servers list (left) lists all authentication servers that you created or discovered that are not selected. You can select up to ten servers in the Selected Servers list (right) to authenticate user logins.

To add or remove servers:

1. Select a server from a list, and click either Add or Remove.

The server is added to or removed from the appropriate list.

NOTE: When you add a server, you can change the parameters for the selected server in the Server Properties group box (see Table 30 for field descriptions).

2. Click Close.

The server(s) are added to or removed from the RADIUS Authentication Servers list on the NMC-RX User Authentication Settings tab.