Cisco Cisco Web Security Appliance S170 사용자 가이드

다운로드
페이지 734
 
27-14
Cisco IronPort AsyncOS 7.5.7 for Web User Guide
Chapter 27      System Administration
Defining User Preferences
Figure 27-10
Enabling External Authentication Using RADIUS
Step 3
Enter the hostname for the RADIUS server.
Step 4
Enter the port number for the RADIUS server. The default port number is 1812.
Step 5
Enter the Shared Secret password for the RADIUS server.
Step 6
Enter the number of seconds for the appliance to wait for a response from the server before timing out.
Step 7
Optionally, click Add Row to add another RADIUS server. Repeat steps 
 for each RADIUS server.
Note
You can add up to ten RADIUS servers.
Step 8
Enter the number of seconds AsyncOS stores the external authentication credentials before contacting 
the RADIUS server again to re-authenticate in the “External Authentication Cache Timeout” field. 
Default is zero (0).
Note
If the RADIUS server uses one-time passwords, for example passwords created from a token, 
enter zero (0). When the value is set to zero, AsyncOS does not contact the RADIUS server again 
to authenticate during the current session.
Step 9
Choose whether to map all externally authenticated users to the Administrator role or to different 
appliance user role types.
Step 10
If you map users to different role types, enter the group name as defined in the RADIUS CLASS attribute 
in the Group Name or Directory field, and choose an appliance role type from the Role field. You can 
add more role mappings by clicking Add Row.
For more information on user role types, see 
.
Step 11
Submit and commit your changes.
Defining User Preferences
Local users can define preference settings, such as language, specific to each account. These settings 
apply by default when the user first logs into the appliance. The preference settings are stored for each 
user and are the same regardless from which client machine the user logs into the appliance. 
When users change these settings but do not commit the changes, the settings revert to the default values 
when they log in again.