Radius Server User Authentication - DragonWave Horizon COMPACT Plus Product Manual

6.0 RADIUS Server User Authentication

The DragonWave Remote Authentication Dial In User Service (RADIUS) server option enables users to
be centrally authenticated before being allowed access to a modem. This adds another layer of security
by removing user access control away from individual modems and moving it to a central server.
Up to five (5) RADIUS servers can be configured.
When one, or more, RADIUS server is configured, the username and password authentication system
on the modem is bypassed, in favour of the RADIUS system. If, on attempting to log in, a user does not
receive a response from a configured RADIUS server, the user will not be allowed to log in. This could
be the case if the server was off line. However, the system can be configured to allow the Super user to
still access the modem via the local modem access control, even when a RADIUS server does not
respond.
Only the Super user can issue any of the RADIUS "set" commands and view any of the security related
entries returned with "get" commands (passwords, shared key etc..)
Procedure 6-1
RADIUS Server User Authentication
Use this procedure to set up user authentication using a RADIUS server and enable the Super user to
access a modem if the RADIUS server does not respond.
Note: To perform this procedure, you must be logged into the system as the Super user.
Required Action
login
View radius servers
Horizon Compact Plus Release 1.0.1
Steps
Log in using the Super user account.
Returns a list of RADIUS servers already configured on the system.
Sequence:
get radius servers press Enter
The system responds:
index active_host active_key
===== =============== =============== ===============
1 192.168.1.48 testing123
2
3
4
5
Note that the second radius server is not active because the radius
key has not been configured.
cfgd_host cfgd_key
192.168.1.48 testing123
192.168.1.20
Wireless Ethernet Product User Manual – Volume 2