Alvarion BreezeACCESS Wi2, System Manual

Page: 175 / 252

Using a RADIUS Server
BreezeMAX Wi² and BreezeACCESS Wi² System Manual 153
9.1.1.2.3 Primary/Secondary RADIUS Server
„
Server address: Specify the IP address of the RADIUS server.
„
Secret/Confirm secret: Specify the password for the AP to use to communicate with the
RADIUS server. The shared secret is used to authenticate all packets exchanged with the server,
proving that the packets originate from a valid/trusted source.
9.1.2 Configuring User Profiles on a RADIUS Server
You must create at least one user profile on the RADIUS server. You can associate multiple user
accounts with a single RADIUS profile.
This section presents all supported RADIUS and Alvarion attributes that can be used to configure a
user profile on a RADIUS server. Attributes starting with MS are Microsoft and are not standard.
.
9.1.2.1 About Alvarion Ltd. Vendor-specific Attribute
The Alvarion Ltd. vendor-specific attribute conforms to RADIUS RFC 2865. You may need to
define the Alvarion Ltd. vendor-specific attribute on your RADIUS server if it is not already present.
You must specify the following:
„
SMI network management private enterprise code = 8744
„
Vendor-specific attribute type number = 0
„
Attribute type = string
NOTE
This option has no effect on IEEE802dot1x authentication requests. These requests always include
the RADIUS Message-Authenticator attribute.
NOTE
The attributes listed in this section are only supported on non-access controlled Virtual Networks
(when the
Use Alvarion access controller
option is disabled in the VSC’s
General
box). For
attributes supported on access-controlled Virtual Networks, refer to the documentation for the
Alvarion access controller.
NOTE
In the following definitions strings are defined as 1 to 253 characters long.