Security
Using an external RADIUS server
6-5
Primary/Secondary RADIUS server
Server address: IP address or fully-qualified domain name of the primary RADIUS
server.
Secret/Confirm secret: Specify the password for the AP to use to communicate with
the RADIUS server. The shared secret is used to authenticate all packets exchanged with
the server, proving that the packets originate from a valid/trusted source.
Configuring user accounts on a RADIUS server
When a non-access-controlled VSC is set to use WPA, 802.1X, or MAC-based authentication, a
RADIUS server must be used to authenticate user logins. You must create an account for each
user on the RADIUS sever with the appropriate username and password.
The AP provides support for a number of standard RADIUS user attributes, including those
for authentication and accounting. Refer to your RADIUS documentation for more
information on how to use these attributes.
Access Request attributes
This table lists all attributes supported in Access Request packets for each authentication
type.
Attribute Admin login 802.1X MAC Format
Acct-Session-Id ✕✔✔32-bit unsigned
integer
Called-Station-Id ✕✔✔Called-Station-Id
Calling-Station-Id ✕✔✔Calling-Station-Id
EAP-Message ✔✔✕EAP-Message
Framed-MTU ✔✔✕Framed-MTU
Message-Authenticator ✔✔✔Message-
Authenticator
NAS-Identifier ✔✔✔NAS-Identifier
NAS-Ip-Address ✕✔✔NAS-Ip-Address
NAS-Port ✔✔✔NAS-Port
NAS-Port-Type ✔✔✔NAS-Port-Type
Service-Type ✔✔✔Service-Type
State ✔✔✕State
User-Name ✔✔✔User-Name
User-Password ✕✕✔User-Password
Vendor-specific (Colubris)
SSID
✕✕✔Colubris-AVPair
(SSID)
To Next Page
Loading...
Need help?
General
