User Manual

Rack ATS AP44xx User Manual90
Manage remote user settings
Path: Configuration > Security > Remote Users > Authentication
APC by Schneider Electric supports the authentication and authorization functions of RADIUS (Remote
Access Dial-In User Service).
• When a user accesses a Rack ATS that has RADIUS enabled, an authentication request is sent
to the RADIUS server to determine the user’s permission level.
• RADIUS user names used with the Rack ATS are case-sensitive, and have a 64 byte maximum,
supporting up to 64 ASCII characters; less for multi-byte languages. Passwords with no
characters (blank passwords) are not allowed.
Specify how you want remote users to be authenticated at logon. Select one of the following:
• Local Authentication Only: RADIUS is disabled. Local authentication is enabled.
• RADIUS, then Local Authentication: RADIUS and local authentication are enabled.
Authentication is requested from the RADIUS server first. If the RADIUS server fails to respond,
local authentication is used.
• RADIUS Only: RADIUS is enabled. Local authentication is disabled.
NOTE: If RADIUS Only is selected, and the RADIUS server is unavailable or improperly
configured, remote access is unavailable to all users. You must use a serial connection to the CLI
and change the access setting to local or radiusLocal to regain access. For example, the
command to change the access setting to local would be radius -a local.
For information about local authentication (not using the centralized authentication of a RADIUS server),
see the Security Handbook on www.apc.com.