Ruckus Wireless ZoneDirector 3000, Руководство пользователя, Страница: 160 / 430

Using an External AAA Server
RADIUS / RADIUS Accounting
160
Ruckus Wireless, Inc.
When ZoneDirector authenticates a client, MAC authentication is checked first,
followed by the EAP process. When the client tries to associate, if MAC authenti-
cation succeeds, the client is authorized directly and allowed to pass traffic without
any further EAP authentication required.
If MAC authentication fails, the EAP authentication process begins and the client
must provide a valid EAP account before access is granted.
You can view the actual authentication method used (MAC address or EAP) from
the
Monitor > Wireless Clients
page.
Figure 92. The Monitor > Wireless Clients page shows the actual authentication method used
for clients in an 802.1X EAP + MAC Address authentication WLAN
Using 802.1X with EAP-MD5
EAP-MD5 differs from other EAP methods in that it only provides authentication of
the EAP peer to the EAP server but not mutual authentication. ZoneDirector
supports 802.1X authentication with EAP-MD5 using either ZoneDirector’s internal
database or an external RADIUS server.
To configure a WLAN for EAP-MD5 authentication:
1 Go to Configure > WLANs and click the Edit link next to the WLAN you would
like to configure.
2 Under Authentication Options: Method , select
802.1X EAP
.
3 Under Encryption Options: Method , select
None
.
4 Under Authentication Server , select either
Local Database
or a previously
configured RADIUS server from the list.
5 Click OK to save your changes.