Table of Contents
Advertisement
Advanced Configuration
8. Set Deny Non-Encrypted Data to Enable if you want to prevent clients that do not have WEP enabled or the
proper keys configured from communicating with the network.
9. Confirm that Key 1 is selected in the Encrypt Data Transmissions Using drop-down menu.
10. Click OK.
11. If you have not already done so, configure the RADIUS authentication settings (see
802.1x
for details.
12. Reboot the Access Point.
802.1x Security and Wireless Distribution Systems (WDS)
Wireless distribution systems (WDS) are configured using specific ports on the AP-600b. To use 802.1x with WDS, you
need to set the 802.1x Security Mode to Mixed (WEP and 802.1x) and confirm that the AP-600b units communicating
in the WDS share the same encryption key (Key 1). See
NOTE
The AP-600a does not support WDS.
RADIUS
The AP-600 communicates with a network's RADIUS server to provide the following features:
–
MAC Access Control Via RADIUS Authentication
–
RADIUS Authentication with 802.1x
–
RADIUS Accounting
You can configure the AP-600 to communicate with up to four different RADIUS servers:
•
Primary Authentication Server
•
Back-up Authentication Server
•
Primary Accounting Server
•
Back-up Accounting Server
NOTE
You must have configured the settings for at least one Authentication server before configuring the settings for
an Accounting server.
The back-up servers are optional, but when configured, the AP-600 will communicate with the back-up server if the
primary server is off-line. After the AP-600 has switched to the backup server, it will periodically check the status of the
primary RADIUS server every five (5) minutes. Once the primary RADIUS server is again online, the AP-600
automatically reverts from the backup RADIUS server back to the primary RADIUS server. All subsequent requests
are then sent to the primary RADIUS server.
MAC Access Control Via RADIUS Authentication
If you want to control wireless access to the network and if your network includes a RADIUS Server, you can store the
list of MAC addresses on the RADIUS server rather than configure each AP-600 individually. From the RADIUS
Authentication tab, you can define the IP Address of the server that contains a central list of MAC Address values that
identify the authorized stations that may access the wireless network. You must specify information for at least the
primary RADIUS server. The back-up RADIUS server is optional.
NOTE
Contact your RADIUS server manufacturer if you have problems configuring the server or have problems
using RADIUS authentication.
Follow these steps to enable RADIUS MAC Access Control:
1. Within the RADIUS Access Control Configuration screen, place a check mark in the box labeled Enable
RADIUS MAC Access Control.
2. Place a check mark in the box labeled Enable Primary RADIUS Authentication Server.
Wireless Distribution System (WDS)
RADIUS Authentication with
for more information.
68
Advertisement
Table of Contents
