Configure The Ap-2500 - Proxim Orinoco AP-2500 User Manual

AP-2500 Authentication Methods
9. Click OK twice.
10. Enter additional VSAs or click OK to continue.
11. Click Close.
12. Click OK twice.

Configure the AP-2500

After you have installed and configured your RADIUS server, you need to configure your AP to communicate with the
RADIUS server and provide internal authentication. Follow these steps:
1. Configure the AP-2500 to use its Internal Web Server for authentication. See
Configuration Instructions
2. If not already open, access the AP's Web browser interface.
3. The first requirement in configuring RADIUS is to create a RADIUS Service Profile on the Configure > Public
Space > AAA > Profile page. Click Add. Enter the following information.
• Authentication:
1. Place a check mark in the Enable Authentication Server box.
2. Enter the server's IP address or DNS name in the Primary Auth Server field. Use either identifier but not
both.
3. Enter the Primary Auth Port number.
— This port must match the RADIUS Authentication port supported by your RADIUS program. Most
RADIUS servers use port 1812 (the default setting) for Authentication. However, Funk Steel-belted
RADIUS uses port 1645.
4. Enter the Shared Secret for the AP and RADIUS server in Primary Auth Secret Key field. This is the
same Shared Secret that you used when you added the AP as one of the RADIUS server's clients.
5. Repeat the above procedure for the Secondary Server parameters if you have a back-up RADIUS
server.
• Accounting:
1. Place a check mark in the Enable Accounting Service box.
2. Enter the server's IP address or DNS name in the Primary Acct Server field. Use either identifier but not
both.
3. Enter the Primary Acct Port number.
— This port must match the RADIUS Accounting port supported by your RADIUS program. Most
RADIUS servers use port 1813 (the default setting) for Accounting. However, Funk Steel-belted
RADIUS uses port 1646.
4. Enter the Shared Secret for the AP and RADIUS server in Primary Acct Secret Key field. This is the
same Shared Secret that you used when you added the AP as one of the RADIUS server's clients.
5. Repeat the above procedure for the Secondary Server parameters if you have a back-up RADIUS
server.
NOTE: A single RADIUS server can perform both Authentication and Accounting. Alternatively, you can
use separate servers for each function.
• Configure the Retransmission Options.
• Select a Retransmission Method. This option is only valid if you have configured settings for a
Secondary Server.
— Failover: The AP make multiple attempts to reach the Primary Server. If the Primary Server fails to
respond (after the specified number of Retransmission Attempts), the AP falls over to the Secondary
Server.
— Round-Robin: The AP first attempts to reach the Primary Server. If the Primary Server fails to
respond, the AP tries the Secondary Server. If the Secondary Server fails to respond, the AP again
tries the Primary Server.
• Enter the number of retransmission attempts (per server) in the Retransmission Attempts field.
• Enter the number of seconds between retransmission attempts in the Retransmission Frequency field.
• Select the Create radio button and click OK. The profile appears in the Radius Service Profiles list.
4. Click on the Configure > Public Space > AAA > AAA RADIUS page.
for step-by-step instructions.
Internal Authentication >
55