Using A Radius Server; Configuring A Radius Client Profile On The Ap - Alvarion BreezeACCESS Wi2 System Manual

Chapter 9 - Security
9.1

Using a RADIUS Server

The AP can use one or more external RADIUS servers to perform a number of authentication and
configuration tasks, including the tasks shown in the table below.
Task
Validating administrator login credentials.
Validating user login credentials for 802.1X or
MAC authentication types.
Storing custom configuration settings for each
user.
Storing accounting information for each user.
9.1.1

Configuring a RADIUS Client Profile on the AP

The AP enables you to define a maximum of 16 RADIUS profiles. Each profile defines the settings
for a RADIUS client connection. To support a client connection, you must create a client account on
the RADIUS server. The settings for this account must match the profile settings you define on the
AP.
For backup redundancy, each profile supports a primary and secondary server.
The AP can function with any RADIUS server that supports RFC 2865 and RFC 2866.
Authentication occurs via authentication types such as: EAP-MD5, CHAP, MSCHAP v1/v2, PAP,
EAP-TLS, EAP-TTLS, EAP-PEAP. EAP-SIM, EAP-AKA, EAP-FAST, and EAP-GTC.
9.1.1.1 Configuration Procedure
1
Select Security > RADIUS profiles. The RADIUS profiles page opens.
2
Select Add New Profile. The Add/Edit RADIUS Profile page opens.
150
For more information see
"Authenticating Administrators Using a
RADIUS Server" on page 135
"Wireless Protection" on page 82
"MAC-based Authentication" on page 84
"Configuring User Profiles on a RADIUS
Server" on page 153
Accounting support is enabled under
Protection" on page 82
Authentication" on page 84
Figure 9-1: RADIUS Profiles
BreezeMAX Wi² and BreezeACCESS Wi² System Manual
"Wireless
or
"MAC-based
.