Appendix B: Configuring The External Radius Server; Configuring Radius Settings For Access Points; Table 89: Radius Attributes For The Access Point - D-Link DWS-3000 Series User Manual

Software User Manual
02/15/2011
A pp e n di x B : C o nf i gu r i n g t he E x t e r n a l R A D IUS
You can store the Valid AP configuration on a local database on the D-Link Unified Switch or on an external RADIUS server.
This appendix describes the attributes you must define for each feature to setup their configuration on the RADIUS server.
One important reason why you might define the AP information on the RADIUS server rather than on the switch is to allow
peer switches to obtain the data from a single source rather than having to define it on each switch.
C RADIUS S
ONFIGURING
Since the AP is identified by its physical MAC address, you must add a RADIUS entry for each AP with the User-Name
attribute set to the MAC address. <Link>Table 89 indicates the attributes to configure in the RADIUS server entry for each
AP. Add the vendor-specific attributes by using the D-Link vendor ID (6132) and the identifier D-Link-Wireless-AP-* (where
"*" represents the attribute name).
Note: This appendix does not describe RADIUS configuration for AP network authentication using 802.1X. This
feature is separate from a valid AP configuration entry. The edge device that connects to the AP performs the
network authentication. The edge device might not be the Unified Switch.
RADIUS Server Attribute Description
User-Name (1)
User-Password (2)
Vendor-Specific (26)
Location
Vendor-Specific (26)
Mode
Vendor-Specific (26)
Profile-ID
Vendor-Specific (26)
Switch-IP
Vendor-Specific (26)
Radio-1-Chan
Vendor-Specific (26)
Radio-2-Chan
Document 34CS3000-SWUM104-D10
Server
A
ETTINGS FOR CCESS

Table 89: RADIUS Attributes for the Access Point

Ethernet Address of the AP.
A fixed password used to lookup an
AP entry.
A description for the AP, often based
on its location.
Indicates whether this AP is
managed by the switch, by an
administrator, or is a rogue AP.
If AP is managed by a switch, the ID
of the configuration profile for this
AP.
If there is more than one WS using
this RADIUS server, indicates the IP
address of the WS to managed this
AP.
Indicates a fixed channel for the
radio.
D-Link Unified Access System
P
OINTS
Range
Valid Ethernet MAC Address
8-63 characters, default
NOPASSWORD
1-32 characters
WS Managed (1)
Standalone (2)
Acknowledged Rogue (3)
1-16
Valid IP Address
Valid channels depend on the
regulatory domain (country-
code) and the configured
mode for that radio in the
assigned AP profile. If the
channel is not valid, its
ignored.
0 indicates automatic channel
assignment.
Usage
Required
Required
Optional
Required
Required if mode is
WS managed.
Optional
Optional, if defined
and valid will
override auto
channel
configuration
Page 207