Alvarion BreezeACCESS Wi2, System Manual

Page: 181 / 252

Using a RADIUS Server
BreezeMAX Wi² and BreezeACCESS Wi² System Manual 159
9.1.3 Configuring Administrator Profiles on the RADIUS Server
To support more than one administrator username and password, you must use a RADIUS server to
manage them. The AP itself supports a single administrator name and password internally.
.
This section presents all supported RADIUS and Alvarion attributes that can be used to configure an
administrator profile on a RADIUS server. Attributes starting with MS are Microsoft and are not
standard.
.
.
9.1.3.1 Access Request Attributes
The following are supported Access Request RADIUS attributes.
„
User-Name (string): The username assigned to the user or a device when using MAC
authentication.
„
NAS-Identifier (string): The NAS ID set on the Security > RADIUS page for the profile being
used.
„
Service-Type (32-bit unsigned integer): As defined in RFC 2865. Set as follows:
º
Web Admin is SERVICE_TYPE_ADMINISTRATIVE
„
Framed-MTU (32-bit unsigned integer): Hard-coded value of 1496.
CAUTION
Improper configuration of the administrator profile could expose the AP to access by any user with a
valid account. The only thing that distinguishes an administrative account from that of a standard
user account is the setting of the service type. Make sure that a user is not granted access if the
service type is not Administrative.
NOTE
In the following definitions strings are defined as 1 to 253 characters long.
NOTE
Only Access Request packets are supported. Access Accept, Access Reject, Access Challenge,
Accounting Request, or Accounting Response requests are not supported.