Motorola WS5100 Series Reference Manual page 114

4-32 WS5100 Series Switch System Reference Guide
5. Click the Config
6. Specify a case-sensitive
The realm name is the name domain/realm name of the KDC Server. A realm name functions similarly to
a DNS domain name. In theory, the realm name is arbitrary. However, in practice a Kerberos realm is
named by uppercasing the DNS domain name associated with hosts in the realm.
7. Provide the password required to effectively update Kerberos authentication credentials.
8. Enter a Server IP Addr
Specify a numerical (non-DNS) IP address for the Primary Key Distribution Center (KDC). The KDC
implements an Authentication Service and a Ticket Granting Service, whereby an authorized user is
granted a ticket encrypted with the user's password. The KDC has a copy of every user password
provided. Optionally, specify a numerical (non-DNS) IP address for a backup KDC. Backup KDCs are often
referred to as slave servers.
9. Specify the
The default port number for Kerberos Key Distribution Centers is port 88.
10.Refer to the
messages if something goes wrong in the transaction between the applet and the switch.
11.Click OK to use the changes to the running configuration and close the dialog.
12.Click Cancel
Configuring Hotspots
A hotspot is essentially a Web page granting user access to the Internet (in this case within a switch
managed WLAN). With the influx of Wi-Fi enabled mobile devices (laptops, PDAs etc.), hotspots are common
and can be found at many airports, hotels and college campuses.
The switch enables hotspot operators to provide user authentication and accounting without a special client
application. The switch uses a traditional Internet browser as a secure authentication device. Rather than
rely on built-in 802.11security features to control association privileges, configure a WLAN with no WEP (an
open network). The switch issues an IP address using a DHCP server, authenticates the user and grants the
user access the Internet.
The hotspot feature supports both internal and external radius servers. It also supports the following three
HTTP redirection options to satisfy various customer configurations:
button to the right of the Kerberos checkbox. The
Realm Name.
(IP address) for the Primary and (if necessary) Backup KDC.
Ports on which the Primary and Backup KDCs reside.
Status field for the current state of requests made from applet. This field displays error
to close the dialog without committing updates to the running configuration.
Kerberos screen displays.