Table of Contents
Advertisement
WM Access Domain Services Configuration
Authentication for a WM-AD
The next step in configuring a WM-AD is to set up the authentication mechanism. There are various
authentication combinations available:
If network assignment is by SSID, authentication can be:
●
none
●
by Captive Portal using internal Captive Portal
●
by Captive Portal using external Captive Portal
●
by MAC-based authentication
●
If network assignment is by AAA (802.1x), authentication can be:
●
by 802.1x authentication, the wireless device user must be authenticated before gaining network
●
access
by MAC-based authentication
●
The first step for any type of authentication is to select RADIUS servers for:
Authentication
●
Accounting
●
MAC-based authentication
●
MAC-based authentication enables network access to be restricted to specific devices by MAC address.
In addition to the other types of authentication, when MAC-based authentication is employed the
Summit WM Controller queries a RADIUS server to determine if the wireless client's MAC address is
authorized to access the network.
Vendor-Specific Attributes
In addition to the standard RADIUS message, you can include Vendor-Specific Attributes (VSAs). The
Summit WM Controller, Access Points and Software authentication mechanism provides six VSAs for
RADIUS and other authentication mechanisms.
Table 4: Vendor-Specific Attributes
Attribute Name
Extreme-URL-Redirection
Extreme-AP-Name
Extreme-AP-Serial
Extreme-WM-AD-Name
Extreme-SSID
108
ID
Type
Messages
1
string
Returned from
RADIUS server
2
string
Sent to RADIUS
server
3
string
Sent to RADIUS
server
4
string
Sent to RADIUS
server
5
string
Sent to RADIUS
server
Description
A URL that can be returned to redirect a
session to a specific Web page.
The name of the AP the client is
associating to. It can be used to assign
policy based on AP name or location.
The AP serial number. It can be used
instead of (or in addition to) the AP name.
The name of the WM-AD the client has
been assigned to. It is used in assigning
policy and billing options, based on service
selection.
The name of the SSID the client is
associating to. It is used in assigning
policy and billing options, based on service
selection.
Summit WM20 User Guide, Software Release 4.2
Advertisement
Table of Contents
