PSM performs user authentication using either the local pre-packaged RADIUS server or external RADIUS servers. By default, PSM is configured to use the local pre-packaged RADIUS server.
To help you work with the local RADIUS server, PSM provides you with an interface to add, modify and delete users from the local RADIUS server database. This capability to make changes to the local RADIUS server database is supported even if you are not using the local RADIUS server for authentication. In this latter case, the changes have no effect on authentication, but are still applicable for creating users for tasks like assigning an alarm to a user.
You cannot use PSM to add, modify, or delete users from external RADIUS servers. An external RADIUS server is any RADIUS server that is not the local, co-resident RADIUS server. Note that the local, co-resident RADIUS server can act as an external RADIUS server to other PSM servers.
The above is true even if you run with server replication. When you run with server replication, you also cannot add, modify, or delete users from external RADIUS servers. In order to add, modify, or delete users, you must be logged in to the PSM server on which the RADIUS server is running.
It is recommended that the same PSM login credentials (username and password) be added to the network elements under management. Some PSM tasks (including using the network element CLI) require the server to log in to the network element using the PSM user’s login credentials.
For information on configuring PSM to work with RADIUS servers (local or external), see RADIUS on PSM.