Cambium Networks PMP 450, Configuration And User'S Manual, Page: 100 / 196

Task 5: Configuring security Chapter 2: Configuration and alignment
2-68
pmp-0050 (May 2012)
Table 28 AP Security attributes
Attribute Meaning
Authentication Mode If the AP has authentication capability, then you can use this field to
select from among the following authentication modes:
Disabled —the AP requires no SMs to authenticate.
Authentication Server —the AP requires any SM that attempts
registration to be authenticated in BAM or Prizm before registration.
AP PreShared Key - The AP acts as the authentication server to its SMs
and will make use of a user-configurable pre-shared authentication key.
The operator enters this key on both the AP and all SMs desired to
register to that AP. There is also an option of leaving the AP and SMs at
their default setting of using the ―Default Key‖. Due to the nature of the
authentication operation, if you want to set a specific authentication key,
then you MUST configure the key on all of the SMs and reboot them
BEFORE enabling the key and option on the AP. Otherwise, if you
configure the AP first, none of the SMs will be able to register.
RADIUS AAA - When RADIUS AAA is selected, up to 3 Authentication
Server (RADIUS Server) IP addresses and Shared Secrets can be
configured. The IP address(es) configured here must match the IP
address(es) of the RADIUS server(s). The shared secret(s) configured
here must match the shared secret(s) configured in the RADIUS
server(s). Servers 2 and 3 are meant for backup and reliability, not for
splitting the database. If Server 1 doesn‘t respond, Server 2 is tried, and
then server 3. If Server 1 rejects authentication, the SM is denied entry
to the network, and does not progress trying the other servers.
Authentication Server DNS
Usage The management DNS domain name may be toggled such that the name
of the authentication server only needs to be specified and the DNS
domain name is automatically appended to that name.
Authentication Server 1 to 5 Enter the IP address of the authentication server (RADIUS, Prizm, or
BAM) and the Shared Secret configured in the authentication server.
When
Authentication Mode RADIUS AAA is selected, the default value of
Shared Secret is ―CanopySharedSecret‖. The Shared Secret may consist of
up to 32 ASCII characters.
Radius Port This field allows the operator to configure a custom port for RADIUS
server communication. The default value is 1812.
Authentication Key The authentication key is a 32-character hexadecimal string used when
Authentication Mode is set to AP PreShared Key . By default, this key is
set to 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF.