Siemens SCALANCE W1780 Configuration Manual page 43

Depending on the RADIUS authorization mode you have selected on the "Security > AAA >
RADIUS Client" page, the device evaluates different information of the RADIUS server.
RADIUS authorization mode "Standard"
If you have set the authorization mode "conventional", the authentication of users via a RADIUS
server runs as follows:
1. The user logs on with user name and password on the device.
2. The device sends an authentication request with the login data to the RADIUS server.
3. The RADIUS server runs a check and signals the result back to the device.
– The RADIUS server reports a successful authentication and returns the value
– The RADIUS server reports a successful authentication and returns a different or even
– The RADIUS server reports a failed authentication to the device:
RADIUS authorization mode "SiemensVSA"
Requirement
For the RADIUS authorization mode "Siemens VSA" the following needs to be set on the
RADIUS server:
● Manufacturer code: 4196
● Attribute number: 1
● Attribute format: Character string (group name)
Procedure
SCALANCE W1780/W1740 according to IEEE 802.11ac Web Based Management
Configuration Manual, 11/2019, C79000-G8976-C485-03
"Administrative User" to the device for the attribute "Service Type".
→ The user is logged in with administrator rights.
no value to the device for the attribute "Service Type".
→ The user is logged in with read rights.
→ The user is denied access.
Technical basics
4.8 User management
43