ProSoft Technology RLX2-IHA User Manual page 79

RLX2-IHx series ♦ 802.11a, b, g, n
Industrial Hotspots
Parameter
IP Address
UDP Port
Secret
Repeater or Client mode parameters
When in Repeater or Client mode, the RLX2-IHx series radio Supplicant
communicates via its Parent radio's authenticator with a RADIUS server. Several
different authentication protocols are available and can be set using the following
parameters.
Parameter
EAP Method
Anonymous ID
ProSoft Technology, Inc.
October 30, 2017
Description
Specifies the IP address of the RADIUS server with which the Network
Administrator has registered this radio.
Specifies the UDP port number the RADIUS server is using to listen to Radius
frames from this radio. The default port number used for the Radius protocol is
1812.
Specifies the pass phrase that was used when this radio was registered to the
RADIUS server. This validates that the Radius frames received on either end are
legitimate.
Description
Specifies the EAP Method, sometimes referred to as the 'outer
protocol' defines the mechanism used to create a secure tunnel
between the Supplicant and RADIUS server during the first phase of
the Authentication sequence. The following EAP methods are
supported:
EAP-PEAP - EAP method using the Protected Extensible
Authentication Protocol
EAP-TLS - EAP method based on X.509 certificates that provides for
mutual authentication. This is the most secure authentication
mechanism available for 802.11. Certificates are required both on the
radio and the RADIUS server. The only authentication option available
for EAP-TLS is to use TLS for the inner protocol.
EAP-TTLS - EAP Tunneled TLS. Similar to EAP-PEAP.
Specifies the identity request in the first phase of the exchange that is
sent in the clear. The identity sent in this first phase can be set to an
anonymous identity (for example anon_user) or an anonymous identity
at a domain (for example anon@xyz.com). The real identity
(username) is sent encrypted after the EAP tunnel is established in the
second phase of the radius exchange.
Use this parameter if you are concerned about the username being
sent in the clear. Your IT department should specify the text for this
parameter based on their RADIUS server(s) configuration.
Configuring a Radio - Detailed Configuration
User Manual
Page 79 of 227