Freeradius Server Configuration Example; Configuring Radius Clients; Creating And Including An Attribute Dictionary - D-Link DWS-3024 User Manual

FreeRADIUS Server Configuration Example

FreeRADIUS is an open source RADIUS server that you can download free from
http://www.freeradius.org. The example in this section describes the files you need to
configure in order to authenticate the D-Link Unified Switch and the D-Link Access Point
with the RADIUS server and to configure the Valid AP settings in the RADIUS database.

Configuring RADIUS Clients

If you require the D-Link Unified Switch or D-Link Access Points to authenticate themselves
with the RADIUS server, you must configure client entries for the devices in the RADIUS
server's
etc/raddb/clients.conf
The entry contains the IP address of the client, the shared secret, and a nickname (or DNS
name) for the device.
The following entry in the
• IP address: 192.168.30.249
• Subnet mask: 255.255.255.0
• Shared secret: wireless
• DNS name: wireless-sw1
The following code shows the format of the client entry in the
client 192.168.30.249/24 {
secret
shortname
}

Creating and Including an Attribute Dictionary

You configure attributes in an attribute dictionary so that you can assign the attributes and
values to an access point when you configure it in the Valid AP database on the RADIUS
server. For example, to assign a location to an access point, the attribute you define has the
following format:
ATTRIBUTE
The fields in the attribute are as follows:
• Attribute—type of entry
• D-Link-Wireless-AP-Location—name of the attribute
• 101—ID number assigned to the attribute; you must use this number when you configure
the location attribute
• string—type of data for the attribute
• D-Link—vendor-specific name for the attribute
The following VALUE field defines one of the values you can assign to an AP for the AP
Mode.
VALUE D-Link-Wireless-AP-Mode
The VALUE fields are as follows:
• VALUE—type of entry
file.
file is for a switch with the following information:
clients.conf
= wireless
= wireless-sw1
D-Link-Wireless-AP-Location
Configuring the External RADIUS Server
clients.conf
101
WS-Managed
FreeRADIUS Server Configuration Example
file:
string D-Link
1
209