Configuring User Accounts On A Radius Server; Access Request Attributes - HP MSM3xx Management And Configuration Manual

Primary/Secondary RADIUS server
 Server address: IP address or fully-qualified domain name of the primary RADIUS
server.
 Secret/Confirm secret: Specify the password for the AP to use to communicate with
the RADIUS server. The shared secret is used to authenticate all packets exchanged with
the server, proving that the packets originate from a valid/trusted source.

Configuring user accounts on a RADIUS server

When a non-access-controlled VSC is set to use WPA, 802.1X, or MAC-based authentication, a
RADIUS server must be used to authenticate user logins. You must create an account for each
user on the RADIUS sever with the appropriate username and password.
The AP provides support for a number of standard RADIUS user attributes, including those
for authentication and accounting. Refer to your RADIUS documentation for more
information on how to use these attributes.

Access Request attributes

This table lists all attributes supported in Access Request packets for each authentication
type.
Attribute
Acct-Session-Id
Called-Station-Id
Calling-Station-Id
EAP-Message
Framed-MTU
Message-Authenticator
NAS-Identifier
NAS-Ip-Address
NAS-Port
NAS-Port-Type
Service-Type
State
User-Name
User-Password
Vendor-specific (Colubris)
SSID
Admin login 802.1X
✕ ✔
✕ ✔
✕ ✔
✔ ✔
✔ ✔
✔ ✔
✔ ✔
✕ ✔
✔ ✔
✔ ✔
✔ ✔
✔ ✔
✔ ✔
✕ ✕
✕ ✕
Security
Using an external RADIUS server
MAC Format
✔
32-bit unsigned
integer
✔
Called-Station-Id
✔
Calling-Station-Id
✕
EAP-Message
✕
Framed-MTU
✔
Message-
Authenticator
✔
NAS-Identifier
✔
NAS-Ip-Address
✔
NAS-Port
✔
NAS-Port-Type
✔
Service-Type
✕
State
✔
User-Name
✔
User-Password
✔
Colubris-AVPair
(SSID)
6-5