User guide

Chapter 5: User Management
101
 CHAP - With CHAP, authentication can be requested by the
server at any time. CHAP provides more security than PAP.
Returning User Group Information via RADIUS
When a RADIUS authentication attempt succeeds, the KX II-101-V2
determines the permissions for a given user based on the permissions of
the user's group.
Your remote RADIUS server can provide these user group names by
returning an attribute, implemented as a RADIUS FILTER-ID. The
FILTER-ID should be formatted as follows: Raritan:G{GROUP_NAME}
where GROUP_NAME is a string denoting the name of the group to
which the user belongs.