55
AP-2500 Authentication Methods
9.
Click
OK
twice.
10. Enter additional VSAs or click
OK
to continue.
11. Click
Close
.
12. Click
OK
twice.
Configure the AP-2500
After you have installed and configured your RADIUS server, you need to configure your AP to communicate with the
RADIUS server and provide internal authentication. Follow these steps:
1. Configure the AP-2500 to use its Internal Web Server for authentication. See
Internal Authentication
>
Configuration Instructions
for step-by-step instructions.
2. If not already open, access the AP’s Web browser interface.
3. The first requirement in configuring RADIUS is to create a
RADIUS Service Profile
on the
Configure
>
Public
Space
>
AAA
>
Profile
page. Click
Add
. Enter the following information.
•
Authentication:
1.
Place a check mark in the
Enable Authentication Server
box.
2.
Enter the server’s IP address or DNS name in the
Primary Auth Server
field. Use either identifier but not
both.
3.
Enter the
Primary Auth Port
number.
— This port must match the RADIUS Authentication port supported by your RADIUS program. Most
RADIUS servers use port 1812 (the default setting) for Authentication. However, Funk Steel-belted
RADIUS uses port 1645.
4.
Enter the Shared Secret for the AP and RADIUS server in
Primary Auth Secret Key
field. This is the
same Shared Secret that you used when you added the AP as one of the RADIUS server’s clients.
5.
Repeat the above procedure for the
Secondary Server
parameters if you have a back-up RADIUS
server.
•
Accounting:
1.
Place a check mark in the
Enable Accounting Service
box.
2.
Enter the server’s IP address or DNS name in the
Primary Acct Server
field. Use either identifier but not
both.
3.
Enter the
Primary Acct Port
number.
— This port must match the RADIUS Accounting port supported by your RADIUS program. Most
RADIUS servers use port 1813 (the default setting) for Accounting. However, Funk Steel-belted
RADIUS uses port 1646.
4.
Enter the Shared Secret for the AP and RADIUS server in
Primary Acct Secret Key
field. This is the
same Shared Secret that you used when you added the AP as one of the RADIUS server’s clients.
5.
Repeat the above procedure for the
Secondary Server
parameters if you have a back-up RADIUS
server.
NOTE:
A single RADIUS server can perform both Authentication and Accounting. Alternatively, you can
use separate servers for each function.
•
Configure the
Retransmission Options
.
•
Select a
Retransmission Method
. This option is only valid if you have configured settings for a
Secondary Server.
—
Failover:
The AP make multiple attempts to reach the Primary Server. If the Primary Server fails to
respond (after the specified number of Retransmission Attempts), the AP falls over to the Secondary
Server.
—
Round-Robin:
The AP first attempts to reach the Primary Server. If the Primary Server fails to
respond, the AP tries the Secondary Server. If the Secondary Server fails to respond, the AP again
tries the Primary Server.
•
Enter the number of retransmission attempts (per server) in the
Retransmission Attempts
field.
•
Enter the number of seconds between retransmission attempts in the
Retransmission Frequency
field.
•
Select the
Create
radio button and click
OK
. The profile appears in the Radius Service Profiles list.
4. Click on the
Configure
>
Public Space
>
AAA
>
AAA RADIUS
page.