![background image](http://html1.mh-extra.com/html/amx/nxa-wapzd1000/nxa-wapzd1000_operation-reference-manual_2937893101.webp)
Configure Tab
97
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Using an External Server for User Authentication
To use an external authentication server:
1.
Go to Configure > AAA Servers.
2.
Click the Create New link in the Authentication/Accounting Servers table, or click Edit next to the
relevant server type in the list.
3.
When the Create New form (or “Editing” form) appears, make the following entries:
In Name, type a descriptive name for this authentication server (for example, “Active Directory”).
In Type, verify that one of the following options is selected:
- Active Directory: If you select this option, you also need to enter the IP address of the AD server,
its port number (default is 389), and its Windows Domain Name.
- LDAP: If you select this option, you also need to enter the IP address of the LDAP server, its port
number (default is 389), and its LDAP Base DN.
- RADIUS: If you select this option, you also need to enter the IP address of the RADIUS server, its
port number (default is 1812), and its shared secret.
- RADIUS Accounting: If you select this option, you also need to enter the IP address of the
RADIUS Accounting server, its port number (default is 1813), and its shared secret.
4.
Additional options appear depending on which AAA server Type you have selected. See the respective
server type for more information.
5.
Click OK to save this server entry. The page refreshes and the AAA server that you added appears in the
list of authentication and accounting servers.
Note that input fields differ for different types of AAA server. The NXA-WAPZD1000 only displays the
option to enable Global Catalog support if Active Directory is chosen, for example, and only offers backup
RADIUS server options if RADIUS or RADIUS Accounting server is chosen. Also note that attribute formats
vary between AAA servers.
Active Directory
In Active Directory, objects are organized in a number of levels including domains, trees and forests. At the
top of the structure is the forest. A forest is a collection of multiple trees that share a common global catalog,
directory schema, logical structure, and directory configuration. In a multi-domain forest, each domain
contains only those items that belong in that domain. Global Catalog servers provide a global list of all objects
in a forest.
NXA-WAPZD1000 support for Active Directory authentication includes the ability to query multiple Domain
Controllers using Global Catalog searches. To enable this feature, you will need to enable Global Catalog
support and enter an Admin DN (distinguished name) and password.
Depending on your network structure, you can configure the NXA-WAPZD1000 to authenticate users against
an Active Directory server in one of two ways: Single Domain Active Directory Authentication or
Multi-Domain Active Directory Authentication.
Single Domain Active Directory Authentication
To enable Active Directory authentication for a single domain:
1.
Go to Configure > AAA Servers.
2.
Click the Edit link next to Active Directory.
3.
Do not enable Global Catalog support.
4.
Enter the IP address and Port of the AD server. The default Port number (389) should not be changed
unless you have configured your AD server to use a different port.
5.
Enter the Windows Domain Name (e.g., domain.amx.com).
6.
Click OK.
For single domain authentication, the admin name and password are not required.
If you want to test your connection to the authentication server, enter an existing
username and password in the Test Authentication Settings panel, and then click
Test. Before testing against a RADIUS server, verify that Password Authentication
Protocol (PAP) is enabled on the RADIUS server, or the test will fail.
Summary of Contents for NXA-WAPZD1000
Page 4: ......
Page 12: ...viii NXA WAPZD1000 ZoneDirector Smart WLAN Controller Table of Contents ...
Page 16: ...Introduction 12 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 130: ...Blocking Client Devices 126 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 146: ...Smart Mesh Networking Best Practices 142 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 153: ...Troubleshooting 149 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...