Digi TransPort LR54, Руководство пользователя

Страница: 354 / 1113

Hotspot Hotspot configuration
LR54 User Guide 354
g. (Optional) Enable Swap Octets to swap the meaning of the input octets/packets and
output octets/packets RADIUS attributes. This can fix issues if the data limits and/or
accounting reports appear to be reversed on the RADIUS server. The default is disabled.
6. Click to expand Walled garden .
Walled garden settings define the "white list" of domains and subnets that unauthenticated
clients are able to access. Include the domain or subnet of the RADIUS server(s) that are being
used for authentication.
n
To add domains that can be accessed by the client prior to authentication:
a. Click to expand Allowed domains .
b. Click

to add a domain.
c. For Domain , type the hostname of the allowed domain.
d. Repeat to add additional domains.
n
To add subnets that can be accessed by the client prior to authentication:
a. Click to expand Allowed subnets .
b. Click

to add a subnet.
c. For Subnet , type an IPv4 address and optional subnet mask, using the format IPv4_
address [/ netmask ], or the keyword any .
d. Repeat to add additional subnets.
7. Click Apply to save the configuration and apply the change.

Configure hotspot for RADIUS users authentication from the Command line
1. Select the device in Remote Manager and click Actions > Open Console , or log into the LR54
local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu . Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Create a new hotspot or Enable hotspot using the default configuration .
4. Set the authentication mode to radius-users :
(config)> network hotspot hotspot_name auth radius-users
(config)>
5. Configure the RADIUS server:
a. Set the fully qualified domain name or IP address of the primary RADIUS server:
(config)> network hotspot hotspot_name radius primary_radius_server
address
(config)>
b. (Optional) Set the fully qualified domain name or IP address of the secondary RADIUS
server, used if the primary RADIUS server is unreachable: