Cambium Networks PMP 450 AP, Configuration Manual

Page: 311 / 649

Chapter 1: Configuration Configuring a RADIUS server
Page
1-283
Identity/Realm
If Realms are being used, select Enable Realm and configure an outer
identity in the Identity field and a Realm in the Realm field. These must
match the Phase 1/Outer Identity and Realm configured in the RADIUS
server. The default Identity is “anonymous”. The Identity can be up to 128
non-special (no diacritical markings) alphanumeric characters. The default
Realm is “canopy.net”. The Realm can also be up to 128 non-special
alphanumeric characters.
Configure an outer Identity in the Username field. This must match the Phase
1/Outer Identity username configured in the RADIUS server. The default
Phase 1/Outer Identity Username is “anonymous”. The Username can be up
to 128 non-special (no diacritical markings) alphanumeric characters.
Username
Enter a Username for the SM. This must match the username configured for
the SM on the RADIUS server. The default Username is the SM’s MAC
address. The Username can be up to 128 non-special (no diacritical
markings) alphanumeric characters.
Password Enter the desired password for the SM in the Password and Confirm
Password fields. The Password must match the password configured for the
SM on the RADIUS server. The default Password is “password”. The
Password can be up to 128 non-special (no diacritical markings)
alphanumeric characters.
Confirm Password
Upload Certificate File
To upload a certificate manually to a SM, first load it in a known place on
your PC or network drive, then click on a Delete button on one of the
Certificate description blocks to delete a certificate to provide space for
your certificate. Click on Choose File, browse to the location of the
certificate, and click the Import Certificate button, and then reboot the radio
to use the new certificate.
When a certificate is in use, after the SM successfully registers to an AP, an
indication of In Use will appear in the description block of the certificate
being used.
The public certificates installed on the SMs are used with the private
certificate on the RADIUS server to provide a public/private key encryption
system.
Up to 2 certificates can be resident on a SM. An installed certificate can be
deleted by clicking the Delete button in the certificate’s description block on
the Configuration > Security tab. To restore the 2 default certificates, click
the Use Default Certificates button in the RADIUS Certificate Settings
parameter block and reboot the radio.
Encryption Setting
Specify the type of airlink security to apply to this AP. The encryption
setting must match the encryption setting of the SMs.
None provides no encryption on the air link.
AES (Advanced Encryption Standard): An over-the-air link encryption
option that uses the Rijndael algorithm and 128-bit keys to establish a higher
level of security. AES products are certified as compliant with the Federal
Information Processing Standards (FIPS 197) in the U.S.A.