Motorola WS5100 Series Reference Manual page 125

9. Refer to the Advanced
PAP PAP - Password Authentication Protocol sends a username and password over a
network to a server that compares the username and password to a table of
authorized users. If the username and password are matched in the table, server
access is authorized.
CHAP CHAP is an encrypted authentication method based on Microsoft's challenge/
response authentication protocol.
DSCP/TOS Optionally mark packets with a DiffServ CodePoint (DSCP) in its header. The DSCP
value is stored in the first 6 bits of the Type of Service (ToS) field that is part of the
standard IP header. The DCSP values are associated with a forwarding treatment
called Per Hop Behaviors (PHB). Service can be provisioned (if necessary) by
assigning a DCSP point code from 1 - 6.
10.Click OK to save the changes made to this screen.
11.Click Cancel to revert back to the last saved configuration and move back to the
Network > Wireless LANs > Edit screen.
Configuring an External Radius Server for Optimal Switch Support
The switch's external Radius Server should be configured with Motorola WS5100 specific attributes to best
utilize the user privilege values assignable by the Radius Server. The following two values should be
configured on the external Server for optimal use with the switch:
• Motorola user privilege values
• User login source
Configuring Motorola Specific Radius Server User Privilege Values
The following recommended Radius Server user privilege settings specify access privilege levels for those
accessing the switch managed network. To define user privilege values, assign the following attributes in
the external Radius Server:
1. Set the attribute number to 1 and its type as "integer."
2. Define the following possible decimal values for user access permissions:
a. Set the Monitor Role
b. Set the Helpdesk Role
c. Set the Nwadmin Role
d. Set the Sysadmin Role
e. Set the WebAdmin Role
f. Set the Superuser Role
3. Specify multiple privileges (for a single user) by specifying different attributes as needed. The privilege
values can be ORed and specified once. For example, if a user needs monitor (read-only) and helpdesk
field to define the authentication protocol used with the Radius Server.
value to 1 (read-only access to the switch).
value to 2 (helpdesk/support access to the switch).
value to 4 (wired and wireless access to the switch).
value to 8 (system administrator access).
value to 16 (guest user application access).
value to 32768 (grants full read/write access to the switch).
4-43
Network Setup