The Users page is used to monitor and control user access to Traffic Sentinel.
Topics:
- How do I add a user?
- How do I remove a user?
- How do I set a user's password?
- How do I recover a lost password?
- How do I set up RADIUS authentication?
- How do I limit access to Traffic Sentinel?
- How do I see which users are currently active?
How do I add a user?
The Edit users option displays a table of users. Click on the New User button at the bottom of the table to add a new user. The following settings are available:
- User, enter a user id. The user will have to type in this name when they log in. If you are using RADIUS authentication then this must be their RADIUS user id.
- Access Level, set the privilege level for the user. Operator level users have limited access and Administrator level users have full access to all product features.
- Authenticate, set the authentication method for checking user passwords. Password authentication checks a user's password against a local password file. RADIUS authentication checks the password against a RADIUS server.
Click Submit to create the new user account.
Finally, if you are using Password authentication you will need to set the user's initial password by clicking on the Password button.
Note: It is possible to configure Traffic Sentinel to automatically add Operator level users if you are using RADIUS authentication. Setting the parameter radius.createusers=YES in global.prefs and Traffic Sentinel will automatically create an account if the user is successfully authenticated against the RADIUS server.
How do I remove a user?
The Edit users option displays a table of users. Click on the Remove button to remove a user.
How do I set a user's password?
The Edit users option displays a table of users. Click on the Password button change or set a user's password.
Note: If RADIUS authentication is used then you will need to set the password on the RADIUS server.
How do I recover a lost password?
Traffic Sentinel does not store passwords so there is no way to recover a password. You will need to give the user a new password using the Edit users option.
Note: If RADIUS authentication is used then you will need to recover or change the password on the RADIUS server.
How do I set up RADIUS authentication?
RADIUS (Remote Authentication Dial-In User Service) is a protocol for authenticating users using their password. In order to use RADIUS authentication you will need to have a RADIUS server configured on your site. The RADIUS option provides access to a form used to configure the connection between Traffic Sentinel and the RADIUS server. The following settings are available:
- Server, the address of the RADIUS server
- Secret, a shared secret used to communicate with the server
- Authenticator, the mechanism used to authenticate a user with the server
Note: You will need to configure your RADIUS server to accept connections from Traffic Sentinel. Default RADIUS retry and timeout settings can be changed in the global.prefs file.
How do I limit access to Traffic Sentinel?
Access to Traffic Sentinel is controlled based on the menu path used to navigate to a particular page. The Access Control option provides access to the form used to control the access privileges needed to view each page. Access levels are: Guest allowing anyone to access the page without a password; Operator requiring that a user have operator level privileges; and Administrator requiring that a user have administrator privileges.
How do I see which users are currently active?
Set the option at the top of the page to Active Users to display a table showing the hosts currently accessing Traffic Sentinel, their user name, the number of web pages they have accessed, when they started their session, and the time of their most recent activity. This table only shows currently active users, if you want to see a log of previous user activity, each user access is logged as a security event on the Sentinel:Events>List page.