D-Link DWS-3024 - FreeRADIUS Server Configuration Example; Configuring RADIUS Clients; Creating and Including an Attribute Dictionary

FreeRADIUS Server Configuration Example 209
Configuring the External RADIUS Server
FreeRADIUS Server Configuration Example
FreeRADIUS is an open source RADIUS server that you can download free from
http://www.freeradius.org. The example in this section describes the files you need to
configure in order to authenticate the D-Link Unified Switch and the D-Link Access Point
with the RADIUS server and to configure the Valid AP settings in the RADIUS database.
Configuring RADIUS Clients
If you require the D-Link Unified Switch or D-Link Access Points to authenticate themselves
with the RADIUS server, you must configure client entries for the devices in the RADIUS
server’s
etc/raddb/clients.conf file.
The entry contains the IP address of the client, the shared secret, and a nickname (or DNS
name) for the device.
The following entry in the
clients.conf file is for a switch with the following information:
• IP address: 192.168.30.249
• Subnet mask: 255.255.255.0
• Shared secret: wireless
• DNS name: wireless-sw1
The following code shows the format of the client entry in the
clients.conf file:
client 192.168.30.249/24 {
secret = wireless
shortname = wireless-sw1
}
Creating and Including an Attribute Dictionary
You configure attributes in an attribute dictionary so that you can assign the attributes and
values to an access point when you configure it in the Valid AP database on the RADIUS
server. For example, to assign a location to an access point, the attribute you define has the
following format:
ATTRIBUTE D-Link-Wireless-AP-Location 101 string D-Link
The fields in the attribute are as follows:
• Attribute—type of entry
• D-Link-Wireless-AP-Location—name of the attribute
• 101—ID number assigned to the attribute; you must use this number when you configure
the location attribute
• string—type of data for the attribute
• D-Link—vendor-specific name for the attribute
The following VALUE field defines one of the values you can assign to an AP for the AP
Mode.
VALUE D-Link-Wireless-AP-Mode WS-Managed 1
The VALUE fields are as follows:
• VALUE—type of entry