Alvarion BreezeACCESS Wi2, System Manual

Page: 172 / 252

150 BreezeMAX Wi² and BreezeACCESS Wi² System Manual
Chapter 9 - Security
9.1 Using a RADIUS Server
The AP can use one or more external RADIUS servers to perform a number of authentication and
configuration tasks, including the tasks shown in the table below.
9.1.1 Configuring a RADIUS Client Profile on the AP
The AP enables you to define a maximum of 16 RADIUS profiles. Each profile defines the settings
for a RADIUS client connection. To support a client connection, you must create a client account on
the RADIUS server. The settings for this account must match the profile settings you define on the
AP.
For backup redundancy, each profile supports a primary and secondary server.
The AP can function with any RADIUS server that supports RFC 2865 and RFC 2866.
Authentication occurs via authentication types such as: EAP-MD5, CHAP, MSCHAP v1/v2, PAP,
EAP-TLS, EAP-TTLS, EAP-PEAP. EAP-SIM, EAP-AKA, EAP-FAST, and EAP-GTC.
9.1.1.1 Configuration Procedure
1 Select Security > RADIUS profiles. The RADIUS profiles page opens.
2 Select Add New Profile. The Add/Edit RADIUS Profile page opens.
Task For more information see
Validating administrator login credentials.
“Authenticating Administrators Using a
RADIUS Server” on page 135
Validating user login credentials for 802.1X or
MAC authentication types.
“Wireless Protection” on page 82
“MAC-based Authentication” on page 84
Storing custom configuration settings for each
user.
“Configuring User Profiles on a RADIUS
Server” on page 153
Storing accounting information for each user. Accounting support is enabled under
“Wireless
Protection” on page 82
or
“MAC-based
Authentication” on page 84
.
Figure 9-1: RADIUS Profiles