Ruckus Wireless ZoneDirector 3000, Руководство пользователя, Страница: 154 / 430

Using an External AAA Server
RADIUS / RADIUS Accounting
154
Ruckus Wireless, Inc.
• Enter IP address , Port number, Admin DN and Password
2 Enter the Key Attribute (default: uid).
3 Click OK to save this LDAP server.
4 In Test Authentication Settings , enter the User Name and Password for a known
member of the relevant group.
5 Click
Test
.
6 Note the Groups associated with this user.
Figure 88. Test authentication settings
7 Go to Configure > Roles , and create a Role based on this User Group (see
Creating New User Roles ).
• Click the
Create New
link in the Roles section.
• In the Group Attributes field, enter Group attributes exactly as they were
returned from the Test Authentication Settings dialog.
• Specify WLAN access , Guest Pass generation and ZoneDirector administra-
tion privileges as desired for this Role.
At this point, any user who logs in and is authenticated against your LDAP server
with the same Group credentials will automatically be assigned to this Role.
RADIUS / RADIUS Accounting
Remote Authentication Dial In User Service (RADIUS) user authentication requires
that ZoneDirector know the IP address, port number and Shared Secret of the
RADIUS/RADIUS Accounting server. When an external RADIUS/RADIUS
Accounting server is used for authentication or accounting, user credentials can be
entered as a standard username / password combination, or client devices can be
limited by MAC address. If using MAC address as the authentication method, you