Authentication services
Using the integrated RADIUS server
11-4
Configuration parameters
RADIUS server
Detect SSID from NAS-Id
Enable this option when working with third-party APs to permit the controller to retrieve the
SSID assigned to the AP, and therefore assign user traffic to the appropriate VSC. For this to
work, the AP must be configured to send its SSID as the NAS ID in all authentication and
accounting requests. See Working with third-party autonomous APs on page 19-6.
Number of accounting sessions
Specify the maximum number of sessions for which the controller will track accounting
information.
Maximum accounting sessions
Specify the maximum number of accounting sessions that the controller supports.
Authentication UDP port
Indicates the port the controller uses for authentication. This port is always set to the
standard value of 1812.
Accounting UDP port
Indicates the port the controller uses for accounting. This port is always set to the standard
value of 1813.
Server authentication support
Select the authentication protocols that the internal RADIUS server will support:
PAP: This protocol must be enabled if any VSCs are configured to use MAC-based
authentication or HTML authentication.
EAP-TTLS
EAP-PEAP
EAP-TLS
RADIUS authorization
Note Applies to autonomous and third-party APs. Requests from controlled APs are always
accepted because they use the management tunnel.
Enable this option to restrict access to the RADIUS server. The RADIUS server will only
respond to requests from RADIUS clients that appear in the list, or that match the default
shared secret, as described below.
IP address
Specify the IP address of the RADIUS client.
Mask
Specify the network mask.
To Next Page
Loading...
Need help?
General
