D-Link DSA-3600, User Manual

Page: 57 / 204

Chapter 4.2 Users
51
Subnet Mask, and shared Secret Key of the authorized devices. An example would be those
downstream Access Points with 802.1x option turned on and shared Secret Key set accordingly.
Click the hyperlink
Roaming out & 802.1X Client Device Settings
to enter the
Roaming out &
802.1X Client Device Settings
interface. Choose the desired type,
Disable
,
Roaming Out
or
802.1X
, and key in the 802.1x client’s IP address and network mask and then click
Apply
to complete
the settings.
y
Username Format:
When
Complete
option is checked, both the username and postfix will be
transferred to the RADIUS server for authentication. On the other hand, when
Only ID
option is
checked, only the username will be transferred to the external RADIUS server for authentication.
y
NAS Identifier:
The Network Access Server (NAS) Identifier of the system for the external RADIUS
server.
y
Class-Policy Mapping
This function applies the selected policy to specific clients grouped by the RADIUS class attribute.
The clients will be applied with the assigned policy while logging on to the system.
y
Server:
The IP address of the external RADIUS server.
y
Authentication Port:
Enter the authentication port of the RADIUS server.
y
Accounting Port:
The accounting port of the external RADIUS server.
y
Secret Key:
The Secret Key for RADIUS authentication.
y
Accounting Service:
The system supports RADIUS accounting that can be enabled or disabled.
y
Authentication Protocol:
The configurations of the system must match the configurations of the
remote RADIUS server.
RAP
(Password Authentication Protocol) transmits password in plain text
without encryption.
CHAP
(Challenge Handshake Authentication Protocol) is a more secured
authentication protocol with hash encryption.
Notice: If the RADIUS Server does not assign idle-timeout value, the DSA-3600 will use the local
idle-timeout.