Black Box LWN602A User Manual page 101

SmartPath APs as RADIUS Authenticators
SmartPath AP RADIUS authenticators provide network access to wireless clients and pass authentication requests between the
wireless clients acting as RADIUS supplicants and a RADIUS authentication server. In this section, you configure the settings that
control how the SmartPath APs communicate with the RADIUS authentication server.
Click Configuration > Advanced Configuration > Authentication > AAA Client Settings > New, and enter the following:
RADIUS Name: RADIUS-10.1.1.10
This is a name for the RADIUS configuration object on SmartPath EMS. Provide it with a useful name that easily identifies
it to you. The name can be up to 32 characters and cannot contain spaces.
Description: HQ RADIUS server with employee accounts
Enter a useful comment about the configuration. It can be up to 64 characters, including spaces.
In the RADIUS Servers section, enter the following to define the necessary network and security settings for making secure
connections with the RADIUS authentication server:
Click the New icon to the right of the IP Address/Domain Name drop-down list, and define the IP address of the RADIUS
authentication server in the IP Objects/Host Names dialog box that appears:
IP Address: (select; this setting automatically applies a netmask of 255.255.255.255)
Object Name: AuthServer-10.1.1.10
Enter the following, and then click Apply to add the IP address to the address configuration:
IP Entry: 10.1.1.10
Type: Global
Setting the type as "Global" means that SmartPath EMS applies the IP entry to all SmartPath APs that include the IP
address/host name object in their configuration.
Description: RADIUS auth server at 10.1.1.10
Click "Save" to save the address configuration and return to the AAA Client Settings page.
IP Address/Domain Name: AuthServer-10.1.1.10 (This is the address that you just created.)
Server Type: Authentication
You can define the service that the RADIUS server provides: authentication, accounting, or both (auth/acct). In this example,
the server only authenticates users, so there is no need to enable accounting. When RADIUS accounting is enabled, the
RADIUS authenticators report the status and cumulative length of RADIUS supplicant sessions to the RADIUS authentication
server. Accounting is often used to track client activity so that users can be accurately charged for network use. It is also
sometimes used to gather statistics about general network usage.
Shared Secret: t6bEdmNfot3vW9vVr6oAz48CNCsDtInd
Confirm Secret: t6bEdmNfot3vW9vVr6oAz48CNCsDtInd
The shared secret that you enter here must exactly match that on the RADIUS authentication server. Because the
authentication server and authenticators use it to verify each other's identities when establishing a RADIUS session, it is
important that the shared secret be fairly strong. Therefore, you use the longest string possible—32 alphanumeric
characters—randomly arranged. To see the text strings that you enter, clear the Obscure Password checkbox.
Chapter 9: Common Configuration Examples
724-746-5500 | blackbox.com
Page 101