Cambium Networks PTP 450 Series, Руководство по настройке

Страница: 332 / 649

Chapter 1: Configuration Configuring a RADIUS server
Page
1-304
Microsoft RADIUS support
This feature allows to configure Microsoft RADIUS (Network Policy and Access Services
a.k.a NPS) as Authentication server for SM and User authentication.
• For SM Authentication, SM will user PEAP-MSCHAPv2 since NPS doesn’t support TTLS
protocol.
• For User Authentication, the Canopy software will use EAP-MD5 but the user has to do
certain configuration in order to enable EAP-MD5 on NPS.
Note
All this configuration has been tested on Windows Server 2012 R2 version.
This feature is not supported on hardware board type P9 or lower platforms.
SM Authentication Configuration
There are no new configurations on AP. However, SM has to be configured for PEAP
authentication protocol.
1.
Go to Configuration > Security page
2. Select “eappeap” for Phase 1 attribute under tab AAA Authentication Settings.
Figure 53 EAPPEAP settings
The Phase 2 will change automatically to MSCHAPv2 on select of Phase 1 attribute as EAP-
PEAP. Other parameters of Phase 2 protocols like PAP/CHAP will be disabled.
Windows Server Configuration
Import Certificate
The SM certificate has to be imported to Windows Server for certificate authentication.
1. Copy the certificate which is configured in SM under Configuration > Security ->
Certificate1 to Windows Server machine.
2. Right click and select ‘Install Certificate’. This will install the certificate and it’s ready for
use. This certificate will be used while configuring PEAP-MSCHAPv2 in NPS.