Table of Contents
Advertisement
authenticated using a different set of authentication servers configured for authenticating users
in VLAN 2.
Authentication servers for each VLAN are configured as part of the configuration options for that
VLAN. RADIUS profiles are independent of VLANs. You can define any profile to be the default
and associate all VLANs to that profile. Four profiles are created by default, "MAC
Authentication", "EAP Authentication", Accounting", and "Management".
RADIUS Servers Enforcing VLAN Access Control
A RADIUS server can be used to enforce VLAN access control in two ways:
Authorizing the SSID that the client uses to connect to the AP. The SSID determines the
•
VLAN that the client is assigned to.
Assigning the user to a VLAN by specifying the VLAN membership information of the user.
•
RADIUS Profiles
A RADIUS server profile consists of a Primary and a Secondary RADIUS server that are
assigned to act as either MAC Authentication servers, 802.1x/EAP Authentication servers, or
Accounting Servers in the VLAN Configuration. See
Use the RADIUS Profiles subtab to add new RADIUS profiles or modify or delete existing
profiles.
Figure 43
shows the RADIUS Server Profiles subtab.
VLAN Configuration
on page 139.
Issue 1 September 2004
RADIUS Configuration
121
Advertisement
Table of Contents
