Network Router User Manual

40 DOMINION KX USER GUIDE
General Settings for Remote Authentication
1. On the Setup menu, click Security, and then click Remote Authentication to configure your
Dominion unit for remote authentication. The Remote Authentication window appears:
Figure 26 Remote Authentication Window
2. Select the option button of the remote authentication protocol you prefer (LDAP or
RADIUS).
3. Type the IP Address of your primary and secondary remote authentication servers in the
Primary server IP address and Secondary server IP address fields.
4. Type the server secret needed to authenticate against your remote authentication servers in
the Secret phrase field. Re-type the server secret in the Confirm secret phrase field.
5. If you selected LDAP as your remote authentication protocol, please read the next section
Implementing LDAP Remote Authentication to complete the fields in the LDAP panel of
the Remote Authentication window. If you selected RADIUS, please skip to Implementing
RADIUS Remote Authentication to complete the fields in the RADIUS panel of the
window.
6. When finished, click OK to save the Remote Authentication changes or click Cancel to exit
without saving.
Note: Upon receipt of an Access-Request from a valid client, an appropriate reply MUST be
transmitted. An Access-Request SHOULD contain a User-Name attribute. It MUST contain either
a NAS-IP-Address attribute or a NAS-Identifier attribute (or both). Raritan recommends using
the NAS-IP-Address matches <IP Address>.
Implementing LDAP Remote Authentication
Reminder: Microsoft Active Directory functions natively as an LDAP authentication server.
If you choose LDAP authentication protocol, complete the LDAP fields as follows:
• Default Port / User Defined Port: By default, LDAP uses port 389. To use a different port,
click User defined ports, and then enter a different port number in the Custom port field.
• Base DN, Base Search: This describes the name you want to bind against the LDAP, and
where in the database to begin searching for the specified Base DN. An example Base DN
value might be: “cn=Administrator,cn=Users,dc=testradius,dc=com” and an example Base
Search value might be: “cn=”Users,dc=raritan,dc=com”. Consult your authentication server
administrator for the appropriate values to enter into these fields.