Справочник Пользователя для Tait International Limited TBCK4A
TB9400 Installation and Operation Manual
Working with Base Stations from Your PC
59
© Tait Limited March 2015
4.2.7
Setting Up Authentication
Connections to the base station can be authenticated by a remote
(i.e. centralized) service (Tools > Settings > Authentication). Two remote
authentication protocols are supported: LDAP and RADIUS.
(i.e. centralized) service (Tools > Settings > Authentication). Two remote
authentication protocols are supported: LDAP and RADIUS.
Notice Only people experienced with the AAA architecture and
authentication protocols should make changes on this page.
authentication protocols should make changes on this page.
Moving logins to a centralized server can provide enhanced security for a
number of reasons, such as:
number of reasons, such as:
■
less work is required to manage password-controlled access to all base
stations in a network; you no longer need to change the password in
each base station individually
stations in a network; you no longer need to change the password in
each base station individually
■
previously used passwords may be excluded from re-use
■
access can be denied after a set number of incorrect passwords is
entered
entered
■
passwords can be set to expire on a certain date
■
remote access to base stations can be globally enabled and disabled as
required for technical staff during the commissioning process.
required for technical staff during the commissioning process.
Once the centralized server logins are set up, we recommend that only one
local administrator login is left on the base station for emergency use
(e.g. when the connection to the server is lost). The password for this
emergency login should be kept secret.
local administrator login is left on the base station for emergency use
(e.g. when the connection to the server is lost). The password for this
emergency login should be kept secret.
Notice Unless they are deleted, any local logins left on the base sta-
tion will still work and have priority over remote logins.
tion will still work and have priority over remote logins.