Motorola Solutions WiNG 5.2.6, Reference Manual

Page: 338 / 670

6 - 76 WiNG 5.2.6 Access Point System Reference Guide
7. Set the following Network Address Identifier (NAI) Routing settings:
8. Select the RADIUS Accounting tab.
Request Proxy Mode Select the method of proxy that browsers communicate with the RADIUS
authentication server. The mode could either be
None , Through Wireless
Controller , or Through RF Domain Manager .
Request Attempts Specify the number of attempts a client can retransmit a missed frame to
the RADIUS server before it times out of the authentication session. The
available range is between 1 and 10 attempts. The default is 3 attempts.
Request Timeout Specify the time between 1 and 60 seconds for the access point’s
re-transmission of request packets. The default is 3 seconds. If this time
is exceeded, the authentication session is terminated.
Retry Timeout Factor Specify the amount of time between 50 and 200 seconds between retry
timeouts for the access points’s re-transmission of request packets. The
default is 100.
DSCP Specify the DSCP value as a 6-bit parameter in the header of every IP
packet used for packet classification. The valid range is between 0 and 63
with a default value of 46.
NAI Routing Enable Check to enable NAI routing. AAA servers identify clients using the NAI.
The NAI is a character string in the format of an e-mail address as either
user or user@ but it need not be a valid e-mail address or a fully qualified
domain name. The NAI can be used either in a specific or generic form. The
specific form, which must contain the user portion and may contain the @
portion, identifies a single user. The generic form allows all users in a given
or without a to be configured on a single command line. Each user still
needs a unique security association, but these associations can be stored
on a AAA server. The original purpose of the NAI was to support roaming
between dialup ISPs. Using NAI, each ISP need not have all the accounts
for all of its roaming partners in a single RADIUS database. RADIUS
servers can proxy requests to remote servers for each.
Realm Enter the realm name in the field. The name cannot exceed 64 characters.
When the access point RADIUS server receives a request for a user name
the server references a table of usernames. If the user name is known, the
server proxies the request to the RADIUS server.
Realm Type Specify the type of realm that is being used, either Prefix or Suffix .
Strip Realm Select the radio button to remove information from the packet when NAI
routing is enabled.