Enterasys C5G124-24 User Manual

Terms and Definitions
10-28 Configuring User Authentication
Configuring the Public Area PWA Station
The public area PWA station provides visitors to your business site with open access to the
internet, while at the same time isolating the station from any access to your internal network. In
order to provide a default set of network resources to communicate over HTTP, policy must be set
to only allow DHCP, ARP, DNS, and HTTP. You may want to set a rate limit that would guard
against excessive streaming. You will also need to set up RADIUS for the public station account on
the authentication server. This configuration will include the guest name, password, and a
RADIUS Filter-ID for the public policy.
Perform the following tasks to configure the public station for PWA authentication:
• Configure the policy appropriate to the public station.
• Setup the RADIUS user account for the public station on the authentication server.
• Enable PWA globally on the switch.
• Configure the IP address for the public station.
• Optionally set up a banner for the initial PWA screen.
• Enable PWA enhancedmode so that any URL input will cause the PWA sign in screen to
appear.
• Set PWA gueststatus to RADIUS authentication mode.
• Set the PWA login guest name.
• Set the PWA login password.
• Enable PWA on the switch port where the public station is connected.
Once the policy and RADIUS account are configured, enter the following CLI input on the switch:
System(rw)->set pwa enable
System(rw)->set pwa ipaddress 10.10.10.101
System(rw)->set pwa banner ”Enterasys Networks Public Internet Access Station”
System(rw)->set pwa enhancedmode enable
System(rw)->set pwa guestatus authradius
System(rw)->set pwa guestname guest
System(rw)->set pwa guestpassword password
System(rw)->set pwa portcontrol enable ge.1.6
This completes the Authentication configuration example.
Terms and Definitions
Table 10-4 lists terms and definitions used in this Authentication configuration discussion.
Table 10-4 Authentication Configuration Terms and Definitions
Term Definition
Authentication
Server (AS)
An entity providing authorization services to an authenticator using RADIUS. The
authentication server may be at a remote location.
Authenticator The switch seeking authentication from the authentication server for a supplicant.
Domain Name
System (DNS)
Serves as a means for the Internet to translate human-readable computer
hostnames, e.g. www.example.com, into the IP addresses.

Enterasys C5G124-24 Specifications

General

Brand	Enterasys
Model	C5G124-24
Category	Switch
Language	English