Chapter 1: Configuration
Configuring a RADIUS server
Page
1-304
Microsoft RADIUS support
This feature allows to configure Microsoft RADIUS (Network Policy and Access Services
a.k.a NPS) as Authentication server for SM and User authentication.
•
For SM Authentication, SM will user PEAP-MSCHAPv2 since NPS doesn’t
TTLS
protocol.
•
For User Authentication, the Canopy software will use EAP-MD5 but the user has to do
certain configuration in order to enable EAP-MD5 on NPS.
Note
All this configuration has been tested on Windows Server 2012 R2 version.
This feature is not supported on hardware board type P9 or lower platforms.
SM Authentication Configuration
There are no new configurations on AP. However, SM has to be configured for PEAP
authentication protocol.
1.
Go to Configuration > Security page
2.
Select “eappeap” for Phase 1 attribute under tab AAA Authentication Settings.
Figure 53 EAPPEAP settings
The Phase 2 will change automatically to MSCHAPv2 on select of Phase 1 attribute as EAP-
PEAP. Other parameters of Phase 2 protocols like PAP/CHAP will be disabled.
Windows Server Configuration
Import Certificate
The SM certificate has to be imported to Windows Server for certificate authentication.
1.
Copy the certificate which is configured in SM under Configuration > Security ->
Certificate1 to Windows Server machine.
2.
Right click and select ‘Install Certificate’. This will install the certificate and it’s ready for
use. This certificate will be used while configuring PEAP-MSCHAPv2 in NPS.
Summary of Contents for PMP 450 AP
Page 51: ...Chapter 1 Configuration Quick link setup Page 1 23 ...
Page 155: ...Chapter 1 Configuration Configuring security Page 1 127 ...
Page 163: ...Chapter 1 Configuration Configuring security Page 1 135 ...
Page 164: ...Chapter 1 Configuration Configuring security Page 1 136 ...
Page 193: ...Chapter 1 Configuration Configuring radio parameters Page 1 165 ...
Page 194: ...Chapter 1 Configuration Configuring radio parameters Page 1 166 ...
Page 195: ...Chapter 1 Configuration Configuring radio parameters Page 1 167 ...
Page 206: ...Chapter 1 Configuration Configuring radio parameters Page 1 178 ...
Page 210: ...Chapter 1 Configuration Configuring radio parameters Page 1 182 ...
Page 636: ...Chapter 5 Troubleshooting Logs Page 5 16 Figure 95 SM Authorization log ...