Atheros IEEE 802.11a/g WLAN Router, Руководство пользователя

Страница: 41 / 52

802.11g Router User’s Guide
39
Authenticate : Two user authentication methods can be enabled: one based on MAC address filter, the
other based on 802.1x EAP /MD5. You can select either or both.
MAC address filtering based authentication requires a MAC address filter table to be created in
either the 802.11a/g Router and/or the RADIUS server. During the Authentication phase, the
MAC address filter table is searched for a match against the wireless client’s MAC address to
determine whether the station is to be allowed or denied to access the network.
The RADIUS server can also be used for 802.1x EAP/MD5 authentication. IEEE 802.1x is an
IEEE standard which is based on a framework that involves stations to be authenticated (called
Supplicant), an authentication server (a RADIUS Server) that provides authentication services,
and an authenticator that provides necessary translation and mediating functions between the
authentication server and stations to be authenticated, in this case your 802.11a/g Router.
During EAP authentication, the 802.11a/g Router relays authentication messages between the
RADIUS server and clients being authenticated.
Server IP: The IP address of the RADIUS server
Port Number: The port number your RADIUS server uses for authentication. The default setting is
1812.
Shared Secret: This is used by your RADIUS server in the Shared Secret field in RADIUS protocol
messages. The shared secret configured in the 802.11a/g Router must match the shared secret
configured in the RADIUS server. The shared secret can contain up to 64 alphanumeric characters.
Time Out: The number of seconds the 802.11a/g Router should wait before authentication is
considered to have failed in the Retry Times (sec) field.
Retry Times: The number of times the 802.11a/g Router should attempt to contact the primary
server before giving up.
Enable Secondary Server : To configure the secondary server, check the “Enable Secondary Server”
box, and configure the same parameters as for the primary server.
RADIUS Server Reattempt Period : This is the amount of time the router will wait before it will try
to reconnect to the primary RADIUS server if the secondary RADIUS server is in operation at the
time, and vice versa.