RADIUS
4-10 Advanced Configuration
RADIUS
RemoteAuthenticationDial‐inUserService(RADIUS)isanauthenticationprotocolthatuses
softwarerunningonacentralservertocontrolaccesstoRADIUS‐awaredevicesonthenetwork.
Anauthenticationservercontainsadatabaseofusercredentialsforeachuserthatrequiresaccess
tothenetwork.
AprimaryRADIUSserver
mustbespecifiedfortheRBT‐4102toimplementIEEE802.1xnetwork
accesscontrolandWi‐FiProtectedAccess(WPA)wirelesssecurity.AsecondaryRADIUSserver
mayalsobespecifiedasabackupshouldtheprimaryserverfailorbecomeinaccessible.
Inaddition,theconfiguredRADIUSservercanalsoactas
aRADIUSAccountingserverand
receiveuser‐sessionaccountinginformationfromtheaccesspoint.RADIUSAccountingcanbe
usedtoprovidevaluableinformationonuseractivityinthenetwork.
IfyouareusingMACauthentication,youmustprovidethefollowinginformationtotheRADIUS
ServerNetworkAdministrator:
•MACAddressofyourwireless
client.Thisbecomestheusername,whichiscase‐sensitive
(lower‐case),andintheformat:00‐01‐f4‐ab‐cd‐ef.
• ConfiguretheRADIUSservertoauthenticateusingthedefaultpasswordof
“NOPASSWORD”foralltheMACaddressbasedusernames.
Notes:
• This guide assumes that you already configured RADIUS server(s) to support the access point.
Configuration of RADIUS server software is beyond the scope of this guide, refer to the
documentation provided with the RADIUS server software.
• If you are using RADIUS, it is highly recommended that you assign a static IP address to ensure
that the address doesn’t change via DHCP.