User's Manual

RDL-3000 User Manual
70-00158-01-DRAFT Proprietary Redline Communications © 2011 Page 63 of 150 November 25, 2010
HTTPS Enable: Check this box to enable HTTPS operation (secure/encrypted Web
session). Refer to page 130 for a complete description of this feature.
Telnet Enable: Check this box to enable a Telnet access (CLI) to the RDL-3000.
When Telnet is enabled, the following additional configuration field is visible:
Telnet Port: Enter Telnet port address (default is 23).
SSH Enable: Check this box to enable SSH operation (secure/encrypted CLI). Refer to
page 130 for a complete description of this feature.
User Authentication: The RDL-3000 supports a local authorization policy and secure
centralized authentication management using a RADIUS server. At least one policy is
always enabled, and both may be enabled to operate together.
The RDL-3000 can be configured for the following authentication modes:
Local Only: Use only RDL-3000 local authentication functions (default). Local
authentication uses user names and password information managed by the RDL-
3000. This method is supported by all versions of RDL-3000 firmware.
RADIUS Only: Use only RADIUS for user authentication.
An access request to the RDL-3000 is forwarded to the RADIUS server. At least one
RADIUS server must be enabled in this mode. The configuration can be done
through the CLI or HTTP. The following parameters must be specified for each
RADIUS server (primary server and optional backup server):
Local + RADIUS: Both methods of user authentication are enforced.
When Local + RADIUS or RADIUS Only is selected, click on the main menu item
RADIUS to display the RADIUS Configuration screen.
Note: When user authentication is set to RADIUS Only or Local + RADIUS, the
authorization data is retrieved from the RADIUS server at 10-minute intervals. For
example, if a user's authorization is changed on the RADIUS server, it may require up to
ten minutes before the RDL-3000 is updated with the new information.
SNMP Enable: Select the version of Simple Network Management Protocol (SNMP).
The SNMP protocol allows an application to interrogate information and change enabled
fields within the RDL-3000 Management Information Base (MIB).
none: SNMP is disabled.
v2: Supports SNMP v1 and v2c commands.
v3: Supports SNMP v3 exclusively. SNMP v1 and SNMP v2c commands not
accepted and an authorization policy is enforced.
When SNMP is enabled, click on the main menu item Configuration: SNMP to display
the SNMP Configuration screen.
Management VLAN Tagging Enable: Control the VLAN tagged management function.
Disabled ( ): There are no restrictions for management traffic.
Enabled ( ): This unit can be managed only using VLAN traffic tagged with the value
specified in the Mgmt. VID field.
On all PMP systems, over-the-air management is possible only after creating a Service
Group for device management and adding a Service for each subscriber. For installation
and setup, it is recommended to use Pass Through settings for this group and member
Service for each subscriber. Set appropriate CIR and priority values to ensure that
management traffic has adequate priority and bandwidth during system operation.
When Management VLAN Tagging is enabled, the following additional configuration field
is visible: