Enabling Radius Pass-Through Authentication; Enabling Peap-Ms-Chap-V2 Authentication - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

Enabling RADIUS Pass-Through Authentication

The following example illustrates how to enable RADIUS pass-through authentication for all 802.1X
network users:
1. Configure the RADIUS server r1 at IP address 10.1.1.1 with the string sunny for the key.
Type the following command:
DWS-1008# set radius server r1 address 10.1.1.1 key sunny
2. Configure the server group sg1 with member r1. Type the following command:
DWS-1008# set server group sg1 members r1
3. Enable all 802.1X users of SSID mycorp to authenticate via pass-through to server group
sg1. Type the following command:
DWS-1008# set authentication dot1x ssid mycorp * pass-through sg1
4. Save the configuration:
DWS-1008 save config
success: configuration saved.

Enabling PEAP-MS-CHAP-V2 Authentication

The following example illustrates how to enable local PEAP-MS-CHAP-V2 authentication for all 802.1X
network users. This example includes local usernames, passwords, and membership in a VLAN. This
example includes one username and an optional attribute for session-timeout in seconds.
1. To set authentication for all 802.1X users of SSID thiscorp, type the following command:
DWS-1008# set authentication dot1x ssid thiscorp * peap-mschapv2 local
2. To add user Natasha to the local database on the switch, type the following command:
DWS-1008# set user Natasha password moon
3. To assign Natasha to a VLAN named red, type the following command:
DWS-1008# set user Natasha attr vlan-name red
4. To assign Natasha a session timeout value of 1200 seconds, type the following
command:
DWS-1008# set user Natasha attr session-timeout 1200
5. Save the configuration:
DWS-1008 save config
success: configuration saved.
D-Link DWS-1008 User Manual