Configuring Radius Client Authentication; Web: Setting Radius Server Parameters - HP ProCurve 420 Management And Configuration Manual

Access Point Configuration

Configuring RADIUS Client Authentication

N o t e
5-28
Configuring RADIUS Client
Authentication
Remote Authentication Dial-in User Service (RADIUS) is an authentication
protocol that uses software running on a central server to control access to
RADIUS-aware devices on the network. An authentication server contains a
database of user credentials for each user that requires access to the network.
A primary RADIUS server must be specified for the access point to implement
IEEE 802.1x network access control and Wi-Fi Protected Access (WPA)
wireless security. A secondary RADIUS server may also be specified as a
backup should the primary server fail or become inaccessible.
This configuration guide assumes that you have already configured the
RADIUS server(s) to support the access point. The configuration of RADIUS
server software is beyond the scope of this guide, refer to the documentation
provided with the RADIUS server software.

Web: Setting RADIUS Server Parameters

The Radius window on the Configuration tab provides the primary and
secondary RADIUS server setup parameters.
The web interface enables you to modify these parameters to use RADIUS
authentication on the access point:
Primary Radius Server Setup: Configure the following settings to use
■
RADIUS authentication on the access point.
• IP Address: Specifies the IP address or host name of the RADIUS
server.
• Port: The User Datagram Protocol (UDP) port number used by the
RADIUS server for authentication messages. (Range: 1024-65535;
Default: 1812)
• Secret Key: A shared text string used to encrypt messages between
the access point and the RADIUS server. Be sure that the same text
string is specified on the RADIUS server. Do not use blank spaces in
the string. (Maximum length: 20 characters)
• Timeout: Number of seconds the access point waits for a reply from
the RADIUS server before resending a request. The default is 5
seconds. (Range: 1-60 seconds)