Table of Contents
Advertisement
The MAC address is entered as 'User name' and as 'Password' in the
written form 'AABBCC-DDEEFF'.
4.3.10
Internal and external RADIUS servers combined
Some companies use an external RADIUS server to authenticate internal
WLAN users by IEEE 802.1x. For applications with a WLAN controller and
multiple access points, the access points initially address the WLAN controller
as their RADIUS server. The WLAN controller then forwards the RADIUS
requests to the external RADIUS server.
The settings described below are only necessary if you are operating
an external RADIUS server in addition to the Public Spot in the
LANCOM.
A Public Spot providing guest-access accounts requires the following settings:
Authentication requests from internal employees are to be forwarded to
an external RADIUS server.
The authentication requests for Public Spot access accounts are to be
handled by the internal RADIUS server.
Realm tagging for RADIUS forwarding
Authentication requests from the two user groups are to be handled sepa-
rately. The WLAN controller uses what are known as "realms" to differentiate
between these two groups. The purpose of realms is to address domains
within which user accounts are valid. Realms can be sent with the authenti-
cation requests to the WLAN controller's RADIUS server. Alternatively, the
Chapter 4: Configuring the WLAN Controller
LANCOM WLC series
107
Advertisement
Table of Contents
