RADIUS Settings

What Is RADIUS Settings?

RADIUS Settings is the screen on which the integration required for the identity of the TR7 administrative users to be authenticated over a RADIUS server is configured. When RADIUS is selected as the Authorization Source while a device user is being added, the password of the user is authenticated against the RADIUS server defined on this screen (Access-Request); the password is not stored on TR7.

Server

Connection

The RADIUS Host and Port

Secret

Shared secret

The Secret Token

Cluster Behavior

In the TR7 installations running as a cluster (two devices), when the RADIUS settings are changed on one device, they are automatically synchronized with the other TR7 device; there is no need to set them separately.

The related screen

When RADIUS is selected as the Authorization Source while a device user is being added, the authentication is done over the RADIUS server on this screen. The automatic creation of the user at the first successful RADIUS login can be turned on with Automatic User Creation under Device Users → User Management Settings.

What Is It For?

Authenticating the identity over a central RADIUS server connects the management access to the corporate AAA infrastructure. This approach provides the following:

• The password is not stored on TR7: the authentication is done against the RADIUS server (Access-Request) every time,
• Central account management: the users are managed from a single point; there is no need to open a separate account on every device,
• The corporate password policies (complexity, validity period, locking) are applied centrally,
• The access is in sync with the center: when the account is closed on the RADIUS side, the TR7 access also ends,

How to Edit?

The RADIUS settings are edited via the TR7 web management interface with the steps below:

1. The Configuration Menu is opened by clicking the TR7 logo at the bottom left.
2. The steps Settings → User Management → RADIUS Settings are followed.
3. By clicking the Edit button, a closable editing tab is opened.
4. The related fields are updated according to the requirements.
5. The changes are saved by clicking the Save button.

TIP

Reaching the page via quick search

Instead of navigating the menu step by step, the related page is reached directly by using the search bar in the bottom left corner of the screen. The search bar opens with the Alt + T shortcut on Windows and Opt + T on macOS; typing the name of the feature being searched for is then sufficient.

The RADIUS Settings Screen

By following the path Settings → User Management → RADIUS Settings, the RADIUS integration information belonging to the TR7 device is displayed. The screen is read-only and shows only the Host and Port rows; the Secret Token is never displayed on this screen for security reasons. The two entries at the top are Edit and Check Radius Connection.

The RADIUS Settings Screen

Button Details

By clicking the Edit button, a closable editing tab in which the RADIUS settings are edited is opened.

The Edit Tab

INFO

Host

The IP address or the domain name of the RADIUS server is entered.

INFO

Port

The port the RADIUS server listens on is entered. The field comes empty; the common value for the authentication is 1812.

INFO

Secret Token

The shared secret key (shared secret) defined on the RADIUS server is entered. It is used in the verification of the requests between TR7 and the RADIUS server and it must be the same on both sides.

INFO

Save

The changes made are saved by clicking the Save button.

The RADIUS Connection Check

By clicking the Check Radius Connection button, whether the RADIUS server can be reached or not is tested with the entered host/port and secret. This is a reachability test, not an authentication attempt: receiving any RADIUS response from the server (including a rejection response) shows that the connection is successful; only if no response is received is it reported as failed.

Failed

The Connection Check: Failed

Successful

The Connection Check: Successful