4IPNET WHG301, Руководство пользователя

Страница: 53 / 97

© 2008 4IPNET, INC.
48
4ipnet WHG301 User ’ s Manual
Click the hyperlink of Radius Client List to enter the Radius Client Configuration page. Choose a desired type
from Disable , Roaming Out or 802.1X . Enter the IP Address , Segment ( Subnet Mask), and Secret Key of 802.1X
clients. Click Apply to complete the settings.
Ÿ
Trans Full Name: When Complete option is checked, both the username and postfix will be transferred to
the RADIUS server for authentication. On the other hand, when Only ID option is checked, only the
username will be transferred to the external RADIUS server for authentication.
Ÿ
NASID: The Network Access Server (NAS) Identifier of the system for the external RADIUS server.
Ÿ
Class-Group Mapping
Ÿ
This function is to assign a Group to a RADIUS class attribute sent from the RADIUS server. When the
clients classified by RADIUS class attributes log into the system via the RADIUS server, each client will be
mapped to its assigned Group.
Ÿ
Server IP: The IP address of the external RADIUS server.
Ÿ
Authentication Port: Enter the authentication port of the RADIUS server.
Ÿ
Accounting Port: The accounting port of the external RADIUS server.
Ÿ
Secret Key:
The Secret Key for RADIUS authentication.
Ÿ
Accounting Service: The system supports RADIUS accounting that can be enabled or disabled.
Ÿ
Authentication Protocol: The configuration of the system must match with that of the remote RADIUS
server. PAP (Password Authentication Protocol) transmits passwords in plain text without encryption. CHAP
(Challenge Handshake Authentication Protocol) is a more secure authentication protocol with hash
encryption.
8
Note: If the RADIUS Server does not assign idle-timeout value, the WHG301 will use the local idle-timeout.