NetComm IAC3000, Руководство пользователя

Страница: 58 / 226

IAC3000
User Manual
54
Local Authentication Database will be used as a RADIUS database for connection with 802.1X
enabled devices such as access points or switches.
When the option is enabled, the hyperlink of Radius Client List will appear.
Click the hyperlink of Radius Client List to enter the Radius Client Configuration page. Choose
a desired type from Disable , Roaming Out or 802.1X . Enter the IP Address , Segment ( Subnet
Mask), and Secret Key of 802.1X clients. Click Apply to complete the settings.
y
Trans Full Name: When Complete option is checked, both the username and postfix will be
transferred to the RADIUS server for authentication. On the other hand, when Only ID option is
checked, only the username will be transferred to the external RADIUS server for authentication.
y
NASID: The Network Access Server (NAS) Identifier of the system for the external RADIUS
server.
y
Class-Group Mapping: This function is to assign a Group to a RADIUS class attribute sent
from the RADIUS server. When the clients classified by RADIUS class attributes log into the
system via the RADIUS server, each client will be mapped to its assigned Group.
y
Server IP: The IP address of the external RADIUS server.
y
Authentication Port: Enter the authentication port of the RADIUS server.
y
Accounting Port: The accounting port of the external RADIUS server.
y
Secret Key: The Secret Key for RADIUS authentication.
y
Accounting Service: The system supports RADIUS accounting that can be enabled or disabled.
y
Authentication Protocol: The configuration of the system must match with that of the remote
RADIUS server. PAP (Password Authentication Protocol) transmits passwords in plain text
without encryption. CHAP (Challenge Handshake Authentication Protocol) is a more secure
authentication protocol with hash encryption.
Notice: If the RADIUS Server does not assign idle-timeout value, the IAC3000 will use the local idle-
timeout.