Iv-1-2 Certificate Management - Draytek VigorAP 906 User Manual

Item
Enable RADIUS Server
Authentication Type
Users Profile
Authentication Client
Backup Radius Cfg
Upload From File
After finishing this web page configuration, please click OK to save the settings.

IV-1-2 Certificate Management

When the local client and remote server are required to make certificate authentication (e.g., Radius
EAP-TLS authentication) for wireless connection and avoiding the attack of MITM, a trusted root
certificate authority (Root CA) will be used to authenticate the digital certificates offered by both
ends.
However, the procedure of applying a digital certificate from a trusted root certificate authority is
complicated and time-consuming. Therefore, Vigor AP offers a mechanism that allows you to
Description
Check it to enable the internal RADIUS server.
Let the user choose the authentication method for the RADIUS server.
Radius EAP Type – There are two types, PEAP and EAP TLS, offered
for selection. If EAP TLS is selected, a certificate must be installed or
must be ensured to be trusted.
Username – Enter a new name for the user profile.
Password – Enter a new password for this new user profile.
Confirm Password – Retype the password to confirm it.
Configure
Add – Make a new user profile with the name and password

specified on the left boxes.
Cancel – Clear current settings for user profile.

Delete Selected – Delete the selected user profile (s).
Delete All – Delete all of the user profiles.
This internal RADIUS server of VigorAP 906 can be treated as the
external RADIUS server for other users. Specify the client IP and secret
key to make the wireless client choosing VigorAP 906 as its external
RADIUS server.
Client IP – Type the IP address for the user to be authenticated by
VigorAP 906 when the user tries to use VigorAP 906 as the external
RADIUS server.
Secret Key – Type the password for the user to be authenticated by
VigorAP 906 while the user tries to use VigorAP 906 as the external
RADIUS server.
Confirm Secret Key – Type the password again for confirmation.
Configure
Add – Make a new client with IP and secret key specified on the

left boxes.
Cancel – Clear current settings for the client.

Delete Selected – Delete the selected client(s).
Delete All – Delete all of the clients.
Backup - Click to store the configuration on this page as a file.
Browse - Click to upload the RADIUS configuration file from the host
to VigorAP.
Restore - Click to restore the RADIUS configuration file to VigorAP.
121