A
- admin page
- agency compliance
- alarm-cut-off command
- alarms
- antenna
- mounting
- mounting conditions 1, 2
- mounting requirements
B
C
- clear alarm command
- clear all-unicast-entry command
- clear authlog command
- clear daemon log command
- clear eventlog command
- clear md5-key-entry command
- clear ptp-stat command
- clear syslog command
- CLI 1
- commands
- alarm-cut-off
- backup scp
- backup tftp
- backup-unicast scp
- backup-unicast tftp
- clear alarm
- clear authlog
- clear daemon log
- clear eventlog
- clear md5-key-entry
- clear ptp-stat
- clear syslog
- config 1/5MHz
- config accounting
- config accounting-level
- config accounting-server add
- config accounting-server del
- config alarm-email-receiver
- config alarm-profile
- config antenna-cable-delay-compensation
- config antenna-voltage
- config auth-order
- config change-password
- config cli-banner-file
- config cli-banner-text
- config cli-timeout
- config datetime
- config dns0
- config dns1
- config domain
- config dst
- config e1 output loopback
- config e1 output port
- config enable-password
- config eth0 auto-nego
- config eth0 duplex
- config eth0 ip
- config eth0 ip-mode
- config eth0 speed
- config eth1 auto-nego
- config eth1 duplex
- config eth1 ip
- config eth1 ip-mode
- config eth1 speed
- config gps anti-jamming
- config holdover-state
- config hostname
- config irig-b
- config language
- config lcd-config
- config ntp add broadcast
- config ntp add manycast_server
- config ntp del
- config ntp generate-md5-key-list
- config ntp reload-md5-key-list
- config password
- config protocol-support
- config ptp add server
- config ptp grandmaster
- config ptp start-announce
- config radius-server add
- config radius-server del
- config snmp contact
- config snmp readonly-community
- config snmp readwrite-community
- config snmp-trap add
- config snmp-trap del
- config snmp-v3user add
- config snmp-v3user del
- config snr
- config ssl-cert
- config ssl-key
- config static-route add
- config static-route del
- config sync-src-priority
- config sync-src-revertive
- config telecom-standard
- config timezone
- config unsecured-communication-protocols
- config user add
- config user class
- config user del
- config user password
- config web
- config web-mode
- config web-timeout
- Disable
- enable
- exit
- ftp
- halt
- help
- history
- logout
- ping
- quit
- reboot
- reset config
- reset password
- restart ntp
- restart ptp
- restore scp
- restore tftp
- restore-unicast scp
- restore-unicast tftp
- save active-md5-key-list scp
- save active-md5-key-list tftp
- save scp authlog
- save scp daemonlog
- save scp eventlog
- save scp syslog
- save tftp authlog
- save tftp daemonlog
- save tftp eventlog
- save tftp syslog
- scp
- show accounting-level
- show accounting-server
- show accounting-status
- show alarm all
- show alarm E1
- show alarm-email-receiver
- show alarm-profile
- show all-configuration
- show auth-order
- show authlog
- show cli-banner
- show daemonlog
- show dst-config
- show E1 config
- show E1 status
- show eventlog
- show frequency
- show gps
- show holdover-state
- show irig-b
- show license
- show network
- show ntp config
- show ntp current-active-md5-key-list
- show ntp current-new-md5-key-list
- show ntp status
- show partition
- show protocol-support
- show ptp config
- show ptp default-dataset
- show ptp parent-dataset
- show ptp stat
- show ptp status
- show radius-server
- show session
- show snmp
- show snmp-trap
- show snmp-v3 user
- show sync-src-priority
- show sync-src-revertive
- show sysinfo
- show syslog
- show telecom-standard
- show time
- show timing-output
- show user-history
- show users
- stop ntp
- tftp
- tftp license
- upload-md5-key-list scp
- upload-md5-key-list tftp
- compliance
- config 1/5MHz command
- config accounting
- config accounting-level
- config accounting-server add
- config accounting-server del
- config alarm-email-receiver command
- config alarm-profile command
- config antenna-cable-delay-compensation command
- config antenna-voltage command
- config auth-order
- config change-password
- config cli-banner-file
- config cli-banner-text
- config cli-timeout command
- config datetime command
- config dns0 command
- config dns1 command
- config domain command
- config dst command
- config e1 output loopback command
- config e1 output port command
- config enable-password command
- config eth0 auto-nego command
- config eth0 duplex command
- config eth0 ip command
- config eth0 ip-mode command
- config eth0 speed command
- config eth1 auto-nego command
- config eth1 duplex command
- config eth1 ip command
- config eth1 ip-mode command
- config eth1 speed command
- config gps anti-jamming command
- config holdover-state
- config hostname command
- config irig-b command
- config language command
- config lcd-config command
- config ntp add broadcast command
- config ntp add manycast_server command
- config ntp del command
- config ntp generate-md5-key-list command
- config ntp reload-md5-key-list command
- config page
- config password command
- config protocol-support command
- config ptp add server command
- config ptp gm announce-receipt-timeout command
- config ptp gm disable command
- config ptp gm domain command
- config ptp gm dscp command
- config ptp gm enable command
- config ptp gm priority1 command
- config ptp gm priority2 command
- config ptp gm profile command
- config ptp gm two-step command
- config ptp grandmaster command
- config ptp start-announce command
- config ptp unicast add command
- config ptp unicast announce-int-range command
- config ptp unicast continuous command
- config ptp unicast del command
- config ptp unicast delay-int-range command
- config ptp unicast sync-int-range command
- config radius-server add
- config radius-server del
- config snmp contact command
- config snmp readonly-community command
- config snmp readwrite-community command
- config snmp-trap add command
- config snmp-trap del command
- config snmp-v3user add command
- config snmp-v3user del command
- config snr command
- config ssl-cert command
- config ssl-key command
- config static-route add command
- config static-route del command
- config sync-src-priority command
- config sync-src-revertive command
- config telecom-standard command
- config timezone command
- config unsecured-communication-protocols command
- config user add
- config user class
- config user del
- config user password
- config web command
- config web-mode command
- config web-timeout command
- console cable
- conventions
- customer support 1, 2
D
- depth
- dimensions
- Disable command
- Dynamic SSL certificate
E
- e-mail lists
- elements
- EMC testing
- enable command
- enable mode password
- environmental specifications
- event log
- event states
- exit command
F
- factory defaults
- ftp command
G
- graphical user interface
H
- halt command
- hardware
- height
- help command
- history command
- humidity
I
- IEEE 1588-2008 SYNC LED
- input voltage
- installation instructions
- installation requirements
- IP address
K
L
- log page
- login class
- changing by Admin user
- login page
- logout command
M
- mounting conditions
- mounting requirements
N
P
- parameters
- password
- physical dimensions
- ping command
- port LEDs
- power
- PTP
Q
R
S
- safety testing
- save active-md5-key-list scp command
- save active-md5-key-list tftp command
- save scp authlog command
- save scp daemonlog command
- save scp eventlog command
- save scp syslog command
- save tftp authlog command
- save tftp daemonlog command
- save tftp eventlog command
- save tftp syslog command
- scp command
- show accounting-level
- show accounting-server
- show accounting-status
- show alarm all command
- show alarm E1 command
- show alarm-email-receiver command
- show alarm-profile command
- show all-configuration command
- show auth-order
- show authlog command
- show cli-banner command
- show daemonlog command
- show dst-config command
- show E1 config command
- show E1 status command
- show eventlog command
- show frequency command
- show gps command
- show holdover-state
- show irig-b command
- show license command
- show network command
- show ntp config command
- show ntp current-active-md5-key-list command
- show ntp current-new-md5-key-list command
- show ntp status command
- show partition command
- show protocol-support command
- show ptp config command
- show ptp default-dataset command
- show ptp parent-dataset command
- show ptp stat command
- show ptp status command
- show radius-server
- show session command
- show snmp command
- show snmp-trap command
- show snmp-v3 user command
- show sync-src-priority command
- show sync-src-revertive
- show sysinfo command
- show syslog command
- show telecom-standard command
- show time command
- show timing-output command
- show user-history
- show users
- SNMPv3
- software
- specifications
- SSH
- status page
- stop ntp command
- support
- support, technical See technical support
- system LEDs
T
U
- unpacking the chassis
- upgrading See software
- upload-md5-key-list scp
- upload-md5-key-list tftp
- user account
- admin password changing
- admin password reset
- creating Read-Only user
- creating Read/Write user
- deleting Read-Only user
- deleting Read/Write user
- guidelines
- management
- modifying
- overview
- Read-Only user password changing by Admin user
- Read/Write user password changing by Admin user
- Read/Write user password changing by Read/Write user
- user interface
W
Configuring User Authentication through RADIUS
The TCA 8000 and TCA 8500 Timing Servers support RADIUS server authentication, local authentication, or both based on the configured authentication order to authenticate the user logging in to the Timing Server.
When you configure the authentication order as RADIUS server authentication followed by the local authentication, the Timing Server passes the information about the logging user to the configured RADIUS servers for authentication. If any one of the RADIUS server successfully authenticates the user, then the Timing Server allows the user to login. If all the configured RADIUS servers fail to authenticate the user or configured RADIUS servers are not available, then the Timing Server performs the local authentication and allows the user to login after successful local authentication. The Timing Server blocks the logging user if both RADIUS and local authentication fails.
When you configure the authentication order as local authentication followed by the RADIUS server authentication, the Timing Server performs the local authentication to grant access to the logging user. If the local authentication fails to authenticate the user, then the Timing Server passes the information about the logging user to the configured RADIUS servers for authentication. If any one of the RADIUS server successfully authenticates the user, then the Timing Server allows the user to login. If all configured RADIUS servers fail to authenticate the user, then the Timing Server denies access to the logging user.
When you configure the authentication order as RADIUS server authentication only, the Timing Server passes the information about the logging user to the configured RADIUS servers for authentication. If any one of the RADIUS server successfully authenticates the user, then the Timing Server allows the user to login. If all configured RADIUS servers fail to authenticate the user, then the Timing Server denies access to the logging user. If all configured RADIUS servers are not available, then the Timing Server performs local authentication and allows the user to login after successful local authentication.
When you configure the authentication order as local authentication only, the Timing Server performs the local authentication to grant or deny access to the user logging in to the Timing Server.
![]() | Note:
|
The user authentication process protects the Timing Server from being accessed by unauthorized persons. The usage of RADIUS authentication servers provides the following advantages:
- Management of multiple user credentials on remote machine for detailed logging.
- Centralized user information and authentication process at one server.
- No loss of user information due to Timing Server damage.
To configure user authentication process:
- Click the Config tab.
- Locate the RADIUS tab across
the top tabs of the Config page. See Figure 19.
Figure 19: Timing Server Config Page—RADIUS Pane (Authentication)
- Configure the RADIUS authentication server details.
- Click the Save button to save the authentication server configuration.
- Select the authentication order.
- Click the Apply button to apply the configured authentication order.
The following sections describe RADIUS authentication server configuration and authentication order configuration:
- Adding a New RADIUS Authentication Server Entry
- Deleting a RADIUS Authentication Server Entry
- Modifying RADIUS Authentication Server Entry Details
- Configuring Authentication Order
Adding a New RADIUS Authentication Server Entry
To add a new RADIUS authentication server entry to the authentication server list:
- Click the Config tab.
- Locate the RADIUS tab across the top tabs of the Config page. See Figure 19.
- In the Server IP field, enter the IP address of the RADIUS authentication server to be used for user authentication.
- In the Port field, enter the port through which the specified RADIUS authentication server is contacted for user authentication.
- In the Retry field, enter the number of attempts should be made for contacting the specified RADIUS authentication server.
- In the Timeout field, enter the time in seconds till which the Timing Server waits for a response from the specified RADIUS authentication server.
- In the Secret Word field, enter the password shared with the specified RADIUS authentication server.
- Click the Save button to add the RADIUS authentication server entry in the RADIUS Authentication Servers window and memory.
Deleting a RADIUS Authentication Server Entry
To delete a RADIUS authentication server entry from the authentication server list:
- Click the Config tab.
- Locate the RADIUS tab across the top tabs of the Config page. See Figure 19.
- In the RADIUS Authentication Servers window, click the RADIUS authentication server entry to be deleted.
- Click the Delete button to remove the entry from the RADIUS Authentication Server window and memory.
Modifying RADIUS Authentication Server Entry Details
To modify the details of a RADIUS authentication server entry existing in the authentication server list:
- Click the Config tab.
- Locate the RADIUS tab across the top tabs of the Config page. See Figure 19.
- In the RADIUS Authentication Servers window, select the RADIUS authentication server entry to be modified.
- Click the Edit button to populate the values of the selected RADIUS authentication server entry in the Server IP, Port, Retry, Timeout, and Secret Word fields.
- Modify the populated values.
- Click the Save button to save the changes done in the selected RADIUS authentication server entry.
Configuring Authentication Order
To configure the authentication order:
- Click the Config tab.
- Locate the RADIUS tab across the top tabs of the Config page. See Figure 19.
- In the first drop box, select the type of authentication
to be performed initially. Select:
- radius—To authenticate the user using the configured RADIUS authentication servers.
- local—To authenticate the user using local settings.
- In the second drop box, select the type of authentication
to be performed on failure or unavailability of initial authentication.
Select:
- radius—To authenticate the user using the configured RADIUS authentication servers.
- local—To authenticate the user using local settings.
- Click the Apply button to save the authentication order.