Motorola RFS7000 Series System Reference Manual page 121

5. Click the Config button to the right of the Kerberos checkbox. The
6. Specify a case-sensitive
The realm name is the name domain/realm name of the KDC Server. A realm name functions similarly
to a DNS domain name. In theory, the realm name is arbitrary. However, in practice a Kerberos realm
is named by uppercasing the DNS domain name associated with hosts in the realm.
7. Provide the password required to effectively update Kerberos authentication credentials.
8. Enter a Server IP Addr
Specify a numerical (non-DNS) IP address for the Primary Key Distribution Center (KDC). The KDC
implements an Authentication Service and a Ticket Granting Service, whereby an authorized user is
granted a ticket encrypted with the user's password. The KDC has a copy of every user password
provided. Optionally, specify a numerical (non-DNS) IP address for a backup KDC. Backup KDCs are
often referred to as slave servers.
9. Specify the Ports
The default port number for Kerberos Key Distribution Centers is port 88.
10. Refer to the Status
messages if something goes wrong in the transaction between the applet and the switch.
11. Click OK to use the changes to the running configuration and close the dialog.
12. Click Cancel to close the dialog without committing updates to the running configuration.
Configuring Hotspots
A hotspot is essentially a Web page granting user access to the Internet (in this case within a switch managed
WLAN). With the influx of Wi-Fi enabled mobile devices (laptops, PDAs etc.), hotspots are common and can
be found at many airports, hotels and college campuses.
The switch enables hotspot operators to provide user authentication and accounting without a special client
application. The switch uses a traditional Internet browser as a secure authentication device. Rather than rely
on built-in 802.11security features to control association privileges, configure a WLAN with no WEP (an open
network). The switch issues an IP address using a DHCP server, authenticates the user and grants the user
access the Internet.
The hotspot feature supports both internal and external radius servers. It also supports the following three
HTTP redirection options to satisfy various customer configurations:
1. Simple internal pre-built web-pages
Realm Name.
(IP address) for the Primary and (if necessary) Backup KDC.
on which the Primary and Backup KDCs reside.
field for the current state of requests made from applet. This field displays error
Network Setup
Kerberos screen displays.
4-35