User's Manual

Smart Managed Pro Switches MS510TX and MS510TXPP
Manage Device Security User Manual220
Configure RADIUS Servers
Remote Authorization Dial-In User Service (RADIUS) servers provide additional security for
networks. The RADIUS server maintains a user database, which contains per-user
authentication information. The switch passes information to the configured RADIUS server,
which can authenticate a user name and password before authorizing use of the network.
RADIUS servers provide a centralized authentication method for the following:
• Web access
• Access control port (802.1X)
From the Security > Management Security > RADIUS menu, you can access the pages
that are described in the following sections:
• Configure the Global RADIUS Server Settings on page 220
• Configure a RADIUS Authentication Server on the Switch on page 222
• Add a Primary or Secondary RADIUS Authentication Server to the Switch on page 222
• Modify the Settings for a RADIUS Authentication Server on the Switch on page 223
• Remove a RADIUS Authentication Server From the Switch on page 223
• Configure a RADIUS Accounting Server on page 224
• Add a RADIUS Accounting Server to the Switch on page 224
• Modify the Settings for a RADIUS Accounting Server on the Switch on page 225
• Remove a RADIUS Accounting Server From the Switch on page 225
Configure the Global RADIUS Server Settings
Use the Global Configuration page to add information about one or more RADIUS servers on
the network.
Consider the maximum delay time when you are configuring RADIUS maximum retransmit
and RADIUS time-out values. If multiple RADIUS servers are configured, the maximum
retransmit period on each server runs out before the next server is attempted. A retransmit
does not occur until the configured time-out period on that server passes without a response
from the RADIUS server. Therefore, the maximum delay in receiving a response from the
RADIUS application equals the retransmit time x time-out period for all configured servers. If
the RADIUS request was generated by a user login attempt, all user interfaces are blocked
until the RADIUS application returns a response.
To configure the global RADIUS server settings:
1. Connect your computer to the same network as the switch.
You can use a WiFi or wired connection to connect your computer to the network, or
connect directly to a switch that is off-network using an Ethernet cable.
2. Launch a web browser.
3. In the address field of your web browser, enter the IP address of the switch.
If you do not know the IP address of the switch, see Access the Switch on page 14.