HP ProCurve 530 NA, Руководство по управлению и настройке

Страница: 227 / 556

7-33
Wireless Security Configuration
Configuring RADIUS Client Authentication
To use dynamic VLAN, the access point must be using a security configuration
that enables 802.1X authentication and must have a RADIUS server configured
(see
page 7-41
). Wireless stations must also support 802.1X station software to
be assigned to a specific VLAN.
Web: Setting RADIUS Server Parameters
The RADIUS Servers tab shown in Figure 7-5 provides setting of the primary
and secondary server parameters on the access point. This establishes the
RADIUS servers on the access point that send user-session information to a
configured RADIUS accounting server. For details on configuring RADIUS
Accounting servers, see
“Web: Setting RADIUS Accounting Server Parameters” on page 5-52.
The Web interface enables you to modify these parameters so that you can
use RADIUS authentication on the access point:
■
Retransmit Attempts: Sets the maximum transmission attempts to a
RADIUS accounting server. The range is 3–30. (The default is 3.)
■ Primary Server: Configures the following settings to send user-session
information from the access point to a RADIUS accounting server.
• Internal Server: Enables the access point to use the internal server
for authentication. (The default is Enable.)
•
IP Address:
Specifies the IP address of the RADIUS server. (The
default is 0.0.0.0, which indicates Disabled.)
• Port: The User Datagram Protocol (UDP) port number used by the
RADIUS server for accounting messages. Setting the port number to
zero disables RADIUS authentication. (The default is 1812.)
• Key: A shared text string used to encrypt messages between the
access point and the RADIUS server.
N o t e
The only characters allowed in the shared key are "A-Z", "a-z", "0-9",
comma, hyphen, tab, blank space, single quote, open parenthesis, and
closing parenthesis. The maximum length for the RADIUS shared key
is 64 characters, and the RADIUS accounting server is not required to
have the same shared key as the authentication server.
• MAC Address Format: Establishes the MAC address format as one
of the following:
–
No Delimiter - MAC addresses are in the form xxxxxxxxxxxx
(default).
– Single Dash - MAC addresses are in the form xxxxxx-xxxxxx.
– Multi Dash - MAC addresses are in the form xx-xx-xx-xx-xx-xx.
–
Multi Colon
- MAC addresses are in the form xx:xx:xx:xx:xx:xx.