Siemens SCALANCE W1750D UI User Manual

Authentication and User Management
14.7 Configuring 802.1X Authentication for a Network Profile
SCALANCE W1750D UI
224 Configuration Manual, 02/2018, C79000-G8976-C451-02
14.7
Configuring 802.1X Authentication for a Network Profile
The SCALANCE W network supports internal RADIUS server and external RADIUS server
for 802.1X authentication.
The steps involved in 802.1X authentication are as follows:
1. The NAS requests authentication credentials from a wireless client.
2. The wireless client sends authentication credentials to the NAS.
3. The NAS sends these credentials to a RADIUS server.
4. The RADIUS server checks the user identity and authenticates the client if the user
details are available in its database. The RADIUS server sends an
Access-Accept
message to the NAS. If the RADIUS server cannot identify the user, it stops the
authentication process and sends an
Access-Reject
message to the NAS. The NAS
forwards this message to the client and the client must re-authenticate with appropriate
credentials.
5. After the client is authenticated, the RADIUS server forwards the encryption key to the
NAS. The encryption key is used for encrypting or decrypting traffic sent to and from the
client.
Note
The NAS acts as a gateway to
guard access to a protected resource. A client connecting to
the wireless network first connects to the NAS.
Configuring 802.1X Authentication for Wireless Network Profiles
You can configure 802.1X authentication for a wireless network profile in the SCALANCE W
UI or the CLI.
In the SCALANCE W UI
To enable 802.1X authentication for a wireless network:
1. On the
Network
tab, click
New
to create a new network profile or select an existing profile
for which you want to enable 802.1X authentication and click
edit
.
2. In the
Edit <profile-name>
or the
New WLAN
window, ensure that all required WLAN and
VLAN attributes are defined, and then click
Next
.
3. On the
Security
tab, specify the following parameters for the
Enterprise
security level:
Select any of the following options from the
Key management
drop-down list.
– WPA-2 Enterprise
– WPA Enterprise
– Both (WPA-2 & WPA)
– Dynamic WEP with 802.1X
4. If you do not want to use a session key from the RADIUS server to derive pairwise
unicast keys, set
Session Key for LEAP
to
Enabled
.

Siemens SCALANCE W1750D UI Specifications

General

Brand	Siemens
Model	SCALANCE W1750D UI
Category	Wireless Access Point
Language	English