![background image](http://html1.mh-extra.com/html/amx/nxa-wapzd1000/nxa-wapzd1000_operation-reference-manual_2937893103.webp)
Configure Tab
99
NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
Group Extraction
By using the Search Filter, you can extract the groups to which a user belongs, as categorized in your LDAP
server. Using these groups, you can attribute Roles within the NXA-WAPZD1000 to members of specific
groups.
For example, in a school setting, if you want to assign members of the group “students” to a Student role, you
can enter a known student’s name in the Test Authentication Settings section, click Test, and return the groups
to which the user belongs. If everything is configured correctly, the result will display the groups associated
with the student, which should include a group called “student” (or whatever was configured on your LDAP
server).
Next, go to the Configure > Roles page (page 79), create a Role named “Student,” and enter “student” in the
Group Attributes field. Then you can select which WLANs you want this Role to have access to, and decide
whether this Role should have Guest Pass generation privileges and NXA-WAPZD1000 administration
privileges. From here on, any user associated to the Group “student” will be given the same privileges when
he/she is authenticated against your LDAP server.
To configure user roles based on LDAP group:
1.
Point the NXA-WAPZD1000 to your LDAP server:
Go to Configure > AAA Servers.
Click Edit next to LDAP.
Enter IP address, Port number, Admin DN and Password.
2.
Enter the Key Attribute (default: uid).
3.
Click OK to save this LDAP server.
4.
In Test Authentication Settings, enter the User Name and Password for a known member of the relevant
group.
5.
Click Test.
6.
Note the Groups associated with this user.
7.
Go to Configure > Roles (page 79), and create a Role based on this User Group.
Click the Create New link in the Roles section.
In the Group Attributes field, enter Group attributes exactly as they were returned from the Test
Authentication Settings dialog.
Specify WLAN access, Guest Pass generation and NXA-WAPZD1000 administration privileges as
desired for this Role.
At this point, any user who logs in and is authenticated against your LDAP server with the same Group
credentials will automatically be assigned to this Role.
RADIUS / RADIUS Accounting
Remote Authentication Dial In User Service (RADIUS) user authentication requires that the NXA-
WAPZD1000 know the IP address, port number and Shared Secret of the RADIUS/RADIUS Accounting
server. When an external RADIUS server is used for authentication, user credentials can be entered as a
standard username / password combination on the RADIUS server, or client devices can be limited by MAC
address. If using MAC address as the authentication method, you must enter the MAC addresses of each client
on the RADIUS server, and any clients attempting to access your WLAN with a MAC address not listed will
be denied access.
To enable user authentication against a RADIUS / RADIUS Accounting server:
1.
Go to Configure > AAA Servers.
2.
Click the Edit link next to the server type you want to enable.
3.
Enter the IP Address, Port number and Shared Secret.
4.
Click OK to save your changes.
Configuring a Backup RADIUS / RADIUS Accounting Server
If a backup RADIUS or RADIUS Accounting server is available, enable the check box next to Backup
RADIUS and additional fields appear. Enter the relevant information for the backup server and click OK.
When you have configured both a primary and backup RADIUS server, an additional option will be available
in the Test Authentication Settings section to choose to test against the primary or the backup RADIUS server.
Summary of Contents for NXA-WAPZD1000
Page 4: ......
Page 12: ...viii NXA WAPZD1000 ZoneDirector Smart WLAN Controller Table of Contents ...
Page 16: ...Introduction 12 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 130: ...Blocking Client Devices 126 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 146: ...Smart Mesh Networking Best Practices 142 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...
Page 153: ...Troubleshooting 149 NXA WAPZD1000 ZoneDirector Smart WLAN Controller ...