RADIUS Settings - General - Revision history

Shin at 07:20, 17 October 2023

2023-10-17T07:20:09Z

Shin: /* Password Complexity Requirements for Local User-Password */

2023-10-17T07:03:01Z

Password Complexity Requirements for Local User-Password

Shin: /* EAP(Extensible Authentication Protocol) */

2023-10-17T05:29:34Z

EAP(Extensible Authentication Protocol)

Shin: /* EAP(Extensible Authentication Protocol) */

2023-10-16T06:16:41Z

EAP(Extensible Authentication Protocol)

Shin at 06:21, 9 August 2023

2023-08-09T06:21:00Z

Shin: /* RADIUS > Settings > General */

2021-06-15T07:49:53Z

RADIUS > Settings > General

Shin at 07:44, 15 June 2021

2021-06-15T07:44:49Z

Shin: /* RADIUS Database Configuration */

2021-06-15T07:40:58Z

RADIUS Database Configuration

Shin: /* RADIUS configuration */

2021-06-01T05:39:14Z

RADIUS configuration

Shin at 05:39, 16 April 2021

2021-04-16T05:39:23Z

← Older revision		Revision as of 07:20, 17 October 2023
Line 33:		Line 33:
	# The user enters the temporary password and creates a new password, then saves it.		# The user enters the temporary password and creates a new password, then saves it.
	# The user connects to the wireless LAN using the new password after changing the SSID.		# The user connects to the wireless LAN using the new password after changing the SSID.
−
−	~~==== Additional attributes for Multi-Factor Authentication ====~~
−	~~Please refer to [[Multi-Factor Authentication]].~~

← Older revision		Revision as of 07:03, 17 October 2023
Line 18:		Line 18:
	For security reasons, a minimum length of 8 characters is recommended, and it's advisable to mix all password combinations.		For security reasons, a minimum length of 8 characters is recommended, and it's advisable to mix all password combinations.

		+	===== Password Reset =====
		+	Password reset involves resetting the password of users stored in the local database and comes in both PASSWORD and OTP (One-Time Password) methods.
		+
		+	When a password is reset, a temporary password is issued, and the wireless LAN authentication for that user is temporarily denied. Wireless LAN users must connect the 'Password Change' page and sets a new password using the temporary password generated during the reset to regain wireless LAN access. The page that allows wireless LAN users to change their passwords can be configured in the [[Guest Page]] menu.
		+
		+	PASSWORD: After a password reset, the temporary password is set to a designated password (the same for all users).
		+	OTP: After a password reset, the temporary password is randomly generated as a 6-digit number (unique for each user).
		+
		+	Here is the basic flow of the password reset process:
		+
		+	# A wireless LAN user requests a password reset(directly via phone or other methods)
		+	# The administrator informs the user of the temporary password generated after the password reset.
		+	# The wireless LAN user accesses the password change page through the Captive Portal or another method.
		+	# The user enters the temporary password and creates a new password, then saves it.
		+	# The user connects to the wireless LAN using the new password after changing the SSID.

	==== Additional attributes for Multi-Factor Authentication ====		==== Additional attributes for Multi-Factor Authentication ====

@@ Line 31: / Line 31: @@
 * Advanced
 ** TLS Cipher Suite: Set this option to specify the allowed TLS cipher suites.  The format is listed in https://www.openssl.org/docs/man1.0.2/man1/ciphers.html
-** TLS version: Set min / max TLS version. Some operating system still use TLS 1.0
+** TLS version: Set min / max TLS version. Some operating systems still use TLS 1.0
 ==== RADIUS configuration   ====

@@ Line 24: / Line 24: @@
 ==== EAP(Extensible Authentication Protocol) ====
-The imRAD supports two EAP methods. You can select either the TTLS(AP Tunneled Transport Layer Security) or PEAP(Protected Extensible Authentication Protocol).<ref>https://en.wikipedia.org/wiki/Extensible_Authentication_Protocol</ref>
+The basic EAP types include TTLS (Tunneled Transport Layer Security) and PEAP (Protected Extensible Authentication Protocol), and you can choose either one.<ref>https://en.wikipedia.org/wiki/Extensible_Authentication_Protocol</ref>
-The recommended phase 2 authentication is the EAP-GTC(Generic Token Card). If a username is authenticated from a customer database by the Pass-Through Authentication, you should not use the MSCHAPv2 as phase 2 authentication.
 * Timer: A list is maintained to correlate EAP-Response packets with EAP-Request packets.  After a configurable length of time, entries in the list expire, and are deleted.
 * Advanced
 ** TLS Cipher Suite: Set this option to specify the allowed TLS cipher suites.  The format is listed in https://www.openssl.org/docs/man1.0.2/man1/ciphers.html
 ** TLS version: Set min / max TLS version. Some operating system still use TLS 1.0
 ==== RADIUS configuration   ====

@@ Line 4: / Line 4: @@
 ! Items !! Description
 |-
-| style='width:200px' | PTA Cached User || If you set this, the imRAD saves a username and its password into the imRAD local database. The password is encrypted with a hash function and can't be decrypted to a plaintext.
+| style='width:200px' | Cached User || If you set this, the imRAD saves a username and its password into the imRAD local database. The password is encrypted with a hash function and can't be decrypted to a plaintext.
 After that, the imRAD can authenticate a user not from a customer database but from the imRAD local database. This can reduce traffics to a customer database.
 The imRAD will delete after a specified number of days after being saved.
 |-
-| Local User || It will delete local users that are inactive for more than the specified day.
+| Local User || It will delete local users that are inactive for more than the specified day. Local user is a user that was created by an administrator.
 |-
 | NAS-ID || It automatically saves [[NAS Identifier | NAS-IDs ]] from the ACCESS-REQUEST and deletes the inactive NAS IDs for more than the specified day.
@@ Line 14: / Line 14: @@
 |}
-==== Password Settings for Local User ====
-You can set the password complexity rules for the local username.
+==== Password Complexity Requirements for Local User-Password ====
 ==== EAP(Extensible Authentication Protocol) ====
@@ Line 25: / Line 31: @@
 ** TLS version: Set min / max TLS version. Some operating system still use TLS 1.0
 ==== RADIUS configuration   ====
@@ Line 48: / Line 49: @@
 The wildcard (i.e. *) in the address field indicates "any". The 0 in the port field indicates "default".<br>
 You can only change the port to another.
 === References ===

@@ Line 1: / Line 1: @@
 === RADIUS > Settings > General ===
 ==== Data Maintenance ====
 {| class="wikitable"

@@ Line 30: / Line 30: @@
 This setting writes the database connection information to has the radius service connect the local database.
 You can check the connection status by click the "Connection Test" button.
 ==== RADIUS configuration   ====

@@ Line 32: / Line 32: @@
 ==== RADIUS configuration   ====
-We recommend having you use the default values.
+The thread pool is a long-lived group of threads that take turns (round-robin) handling any incoming requests.
 ===== Advanced =====
 The port values of 1812 for authentication and 1813 for accounting are RADIUS standard ports defined by the Internet Engineering Task Force (IETF) in RFCs 2865 and 2866.

← Older revision		Revision as of 05:39, 16 April 2021
Line 42:		Line 42:
	The wildcard (i.e. *) in the address field indicates "any". The 0 in the port field indicates "default".<br>		The wildcard (i.e. *) in the address field indicates "any". The 0 in the port field indicates "default".<br>
	You can only change the port to another.		You can only change the port to another.
		+
		+	=== References ===