5.
Click
Test
.
6.
Note the Groups associated with this user.
Figure 55: Test authentication settings
7.
Go to
Configure
>
Roles
, and create a Role based on this User Group (see
on page 230).
• Click the
Create New
link in the
Roles
section
• In the
Group Attributes
field, enter Group attributes exactly as they were returned
from the
Test Authentication Settings
dialog.
• Specify WLAN access, Guest Pass generation and ZoneDirector administration
privileges as desired for this Role.
At this point, any user who logs in and is authenticated against your LDAP server with
the same Group credentials will automatically be assigned to this Role.
RADIUS /RADIUS Accounting
Remote Authentication Dial In User Service (RADIUS) user authentication requires that
ZoneDirector know the IP address, port number and Shared Secret of the
RADIUS/RADIUS Accounting server.
When an external RADIUS/RADIUS Accounting server is used for authentication or
accounting, user credentials can be entered as a standard username/password
combination, or client devices can be limited by MAC address. If using MAC address
as the authentication method, you must enter the MAC addresses of each client on the
AAA server, and any clients attempting to access your WLAN with a MAC address not
listed will be denied access.
A RADIUS/RADIUS Accounting server can be used with 802.1X, MAC authentication,
Web Authentication (Captive Portal) and Hotspot WLAN types. To configure a
RADIUS/RADIUS Accounting server entry in ZoneDirector:
1.
Go to
Configure
>
AAA Servers
.
2.
Click the
Create New
link under Authentication/Accounting Servers.
3.
Select
Radius
or
Radius Accounting
for the AAA server type.
93
Ruckus Wireless ZoneDirector™ Release 10.0 User Guide
Configuring Security and Other Services
Using an External AAA Server
