MSM7xx Controllers Configuration Guide v6.4.0

Support for regular expressions in realm names
Standard regular expressions can be used in realm names. For example:
MatchesExpression
mycompany1.commycompany[1-3].com
mycompany2.com
mycompany3.com
Matches mycompany.com with any number of characters in front of it. For
example: headoffice.mycompany.com or server-mycompany.com.
.*mycompany.com
Matches.mycompany.com with any number of characters in front of it. For
example: headoffice.mycompany.com or server.mycompany.com, but not
server-mycompany.com.
.*\.mycompany.com
Authenticating manager logins using a third-party RADIUS server
Using a RADIUS server enables you to have multiple manager accounts, each with a unique login
name and password. Identify manager accounts using the vendor specific attribute
web-administrative-role. Valid values for this attribute are Manager and Operator. For attribute
information, see “Administrator attributes” (page 457). To use a RADIUS server, you must define a
RADIUS profile on the Controller >> Authentication > RADIUS profiles page.
NOTE: Login credentials for managers can be verified using local account settings and/or an
third-party RADIUS sever. If both options are enabled, the RADIUS server is always checked first.
Configure RADIUS authentication as follows:
1. Define an account for the administrator on the RADIUS server. See “Administrator attributes”
(page 457).
2. On the controller, create a RADIUS profile that will connect the controller to the RADIUS server.
See “Configuring a RADIUS server profile” (page 364).
3. Select Controller >> Management > Management tool.
4. Under Administrator authentication, set Authenticate via to the RADIUS profile you created.
In this example, the profile is called RAD1.
5. Test the RADIUS account to make sure it is working before you save your changes. Specify
the appropriate username and password and select Test.
(As a backup measure you can choose to enable Local. This will allow you to log in using the
local account if the connection to the RADIUS server is unavailable.)
368 Authentication services