Draytek VIGOR3220 SERIES, Руководство пользователя

Страница: 154 / 742

Vigor3220 Series User’s Guide 142
Item Description
Enable Check to enable internal RADIUS client feature.
Authentication Port Set a port number for internal RADIUS server.
RADIUS Client Access List Allow to configure that clients under specified domain (IPv4
and IPv6) must be authenticated with the specified shared
secret.
Enable - Check to enable RADIUS client feature.
Shared Secret - The RADIUS server and client share a secret
that is used to authenticate the messages sent between
them. Both sides must be configured to use the same shared
secret. The maximum length of the shared secret you can set
is 36 characters.
IP Address
–
Type the IP addres of the wired/wireless
client.
IP Mask
–
Type the subnet mask required for the IP address.
IPv6 Address
–
Type the IPv6 address of the wired/wireless
client.
IPv6 Length - Type the prefix length required for the IPv6
address.
Authentication Specify the way to authenticate the wireless client.
PAP Only / PAP/CHAP/MS-CHAP/MS-CHAPv2 – Choose PAP
Only. Or choose the one which supports PAP, CHAP, MS-CHAP
and MS-CHAPv2.
Support 802.1X Method – The built in RADIUS server offered
by Vigor router can act as the AAA server. Check the box to
enable the function of authentication mechanism.
User Profile During the process of security authentication, user account
and user password will be required for identity
authentication. Before configuring such page, create at least
one user profile in User Management>>User Profile first.
Select All – Click it to select all of the user profiles in
Available List.
Clear All- Click to remove all of the user profiles in Available
List.
Available List – The user profiles without RADIUS server
enabled in User Management >> User Profile will be listed
in this field.
Authentication List –The user profiles with RADIUS server
enabled in User Management >> User Profile will be listed
in this field.
Synchronize Internal
RADIUS user list to Local
802.1X user list
Users can be authenticated by RADIUS server and local
802.1X to get certain network service. It is not necessary to
create new user profiles (containing user accounts and user
passwords) for RADIUS and local 802.1X respectively.
Simply check this box; all of the user profiles (prepared for
RADIUS server authentication) listed in Authentication List
will be synchronized for local 802.1X user authentication.
After finished the above settings, click OK button to save the settings.
I I I I - - 4 4 - - 5 5 - - 3 3 E E x x t t e e r r n n a a l l T T A A C C A A C C S S + +