Configuring Radius Client Authentication; Web: Setting Radius Server Parameters - HP ProCurve 420 Management And Configuration Manual

Access Point Configuration

Configuring RADIUS Client Authentication

N o t e
5-42
Configuring RADIUS Client
Authentication
Remote Authentication Dial-in User Service (RADIUS) is an authentication
protocol that uses software running on a central server to control access to
RADIUS-aware devices on the network. An authentication server contains a
database of user credentials for each user that requires access to the network.
A primary RADIUS server must be specified for the access point to implement
IEEE 802.1X (802.1X) network access control and Wi-Fi Protected Access
(WPA) wireless security. A secondary RADIUS server may also be specified
as a backup should the primary server fail or become inaccessible.
A RADIUS server can also be configured to provide MAC address authentica­
tion of wireless clients. If required, the access point can support both MAC
address and 802.1X authentication using a RADIUS server. However, config­
uring RADIUS MAC address authentication with WPA security is not
supported. For more information, see "Web: Configuring MAC Address
Authentication" on page 5-87.
This configuration guide assumes that you have already configured the
RADIUS server(s) to support the access point. The configuration of RADIUS
server software is beyond the scope of this guide, refer to the documentation
provided with the RADIUS server software.

Web: Setting RADIUS Server Parameters

The Auth. Servers window on the Security tab provides the primary and
secondary RADIUS server setup parameters.
The web interface enables you to modify these parameters to use RADIUS
authentication on the access point:
■ MAC Address Format: Sets the format for specifying MAC addresses
on the RADIUS server.
• Multi Colon - Enter MAC addresses in the form xx:xx:xx:xx:xx:xx.
• Multi Dash - Enter MAC addresses in the form xx-xx-xx-xx-xx-xx.
• No Delimiter - Enter MAC addresses in the form xxxxxxxxxxxx.
• Single Dash - Enter MAC addresses in the form xxxxxx-xxxxxx.