ProCurve 10ag, Руководство по установке и настройке, Страница: 58 / 132

4-20
Setting Up the Access Point
Configuring Security Settings
3. In the Key Update Interval box, define the time interval (in seconds)
for regenerating a group key.
4. Under RADIUS Server, configure the RADIUS server settings:
• RADIUS Server IP : Type the IP address of the RADIUS server on the
network.
• RADIUS Port : Type the User Datagram Protocol (UDP) port number
used by the RADIUS server for accounting messages. Setting the port
number to zero disables RADIUS authentication.
• RADIUS Secret : Type a shared text string used to encrypt messages
between the access point and the RADIUS server. Make sure that the
same text string is specified on the RADIUS Accounting server. Do
not use blank spaces in the string. (Maximum length: 20 characters)
5. Click Apply to save your changes.
Repeat the same procedure for each SSID to which you want to assign WPA2
(AES) as its security profile.
Configuring 802.1X
802.1X is a standard framework for network access control that uses a central
RADIUS server for user authentication. This control feature prevents unau-
thorized access to the network by requiring an 802.1X client application to
submit user credentials for authentication.
The 802.1X standard uses the Extensible Authentication Protocol (EAP) to
pass user credentials (either digital certificates, user names and passwords,
or other) from the client to the RADIUS server. Client authentication is then
verified on the RADIUS server before the access point grants the client access
to the network.