manualshive.com logo in svg

SENAO NOA-3570, Руководство пользователя

Поделиться
Скачать
SENAO NOA-3570 Скачать руководство пользователя страница 74

NOA-3570 User’s Guide

Chapter 6 Internal RADIUS Server

81

C

H A P T E R

6

Internal RADIUS Server

The NOA-3570 can use its internal RADIUS server to authenticate wireless clients. It can also 
serve as a RADIUS server to authenticate other APs and their wireless clients. For more 
background information on RADIUS, see the

 Introduction to RADIUS 

section

.

6.1  Internal RADIUS Overview

The NOA-3570 has a built-in RADIUS server that can authenticate wireless clients or other 
APs (that are configured as trusted APs).

The NOA-3570 can function as an AP and as a RADIUS server at the same time.

PEAP (Protected EAP) and MD5 authentication is implemented on the internal RADIUS 
server using simple username and password methods over a secure TLS connection. See the 
appendices for more information on the types of EAP authentication and the internal RADIUS 
authentication method used in your NOA-3570. 

Figure 35   

NOA-3570 Authenticates Wireless Stations

Содержание NOA-3570

Страница 1: ...NOA 3570 Outdoor Access Point User s Guide Version 3 50 12 2005...

Страница 2: ...Certifications 1 Select the certification you wish to view from this page...

Страница 3: ...turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation...

Страница 4: ...radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with minimum distance 20cm between the radiator your body This transmitter must not...

Страница 5: ...a or 230V AC in Europe Do NOT use the device if the power supply is damaged as it might cause electrocution If the power supply is damaged remove it from the power outlet Do NOT attempt to repair the...

Страница 6: ...ions for the NOA 3570 33 1 3 1 Access Point 33 1 3 2 AP Bridge 34 1 3 3 Bridge Repeater 35 Chapter 2 Introducing the Web Configurator 37 2 1 Web Configurator Overview 37 2 2 Accessing the NOA 3570 Web...

Страница 7: ...LAN on the NOA 3570 56 5 3 Spanning Tree Protocol STP 57 5 3 1 Rapid STP 57 5 3 2 STP Terminology 57 5 3 3 How STP Works 58 5 3 4 STP Port States 58 5 4 WEP Encryption 58 5 5 Configuring the Wireless...

Страница 8: ...Defaults 91 8 2 IP Address and Subnet Mask 91 8 2 1 IP Address Assignment 92 8 3 Configuring IP 92 Chapter 9 Certificates 95 9 1 Certificates Overview 95 9 1 1 Advantages of Certificates 96 9 2 Self s...

Страница 9: ...cessing the SMT via the Console Port 131 12 2 1 Initial Screen 131 12 2 2 Entering the Password 132 12 3 Accessing the SMT via Telnet 133 12 4 Navigating the SMT Interface 133 12 4 1 System Management...

Страница 10: ...formation 165 19 2 2 Console Port Speed 166 19 3 Log and Trace 166 19 3 1 Viewing Error Log 167 19 4 Diagnostic 167 Chapter 20 Firmware and Configuration File Maintenance 169 20 1 Filename Conventions...

Страница 11: ...de 181 21 2 Time and Date Setting 182 21 2 1 Resetting the Time 183 Chapter 22 Troubleshooting 185 22 1 Problems Starting Up the NOA 3570 185 22 2 Problems with Console Port Access 185 22 3 Problems w...

Страница 12: ...NOA 3570 User s Guide Table of Contents 17 Appendix I Command Interpreter 245 Appendix J Brute Force Password Guessing Protection 247 Appendix K Log Descriptions 249 Index 253...

Страница 13: ...NOA 3570 User s Guide 18 Table of Contents...

Страница 14: ...tem General 50 Figure 18 Password 51 Figure 19 Time Setting 52 Figure 20 Wireless Access Point 59 Figure 21 Bridging Example 62 Figure 22 Bridge Loop Two Bridges Connected to Hub 63 Figure 23 Bridge L...

Страница 15: ...etwork Temporarily Disconnected 125 Figure 60 Firmware Upload Error 126 Figure 61 Configuration 127 Figure 62 Configuration Upload Successful 128 Figure 63 Network Temporarily Disconnected 128 Figure...

Страница 16: ...Maintenance Backup Configuration 173 Figure 103 System Maintenance Starting Xmodem Download Screen 173 Figure 104 Backup Configuration Example 173 Figure 105 Successful Backup Confirmation Screen 174...

Страница 17: ...otocol TCP IP Properties 209 Figure 129 Macintosh OS 8 9 Apple Menu 210 Figure 130 Macintosh OS 8 9 TCP IP 210 Figure 131 Macintosh OS X Apple Menu 211 Figure 132 Macintosh OS X Network 212 Figure 133...

Страница 18: ...e 17 Wireless LAN 802 1x WPA 74 Table 18 Wireless LAN 802 1x WPA for 802 1x Protocol 76 Table 19 Wireless LAN 802 1x WPA for WPA Protocol 79 Table 20 Wireless LAN 802 1x WPA for WPA PSK Protocol 80 Ta...

Страница 19: ...59 Menu 24 1 System Maintenance Status 164 Table 60 Menu 24 2 1 System Maintenance Information 166 Table 61 Menu 24 4 System Maintenance Menu Diagnostic 168 Table 62 Filename Conventions 170 Table 63...

Страница 20: ...rnative Subnet Mask Notation 215 Table 92 Two Subnets Example 215 Table 93 Subnet 1 216 Table 94 Subnet 2 216 Table 95 Subnet 1 217 Table 96 Subnet 2 217 Table 97 Subnet 3 217 Table 98 Subnet 4 218 Ta...

Страница 21: ...NOA 3570 User s Guide 26 List of Tables...

Страница 22: ...ws remote configuration and management of your NOA 3570 The Power over Ethernet PoE feature means that power can be delivered to the NOA 3570 over an Ethernet line This allows you to mount the NOA 357...

Страница 23: ...WPA and WEP are user authentication and improved data encryption WDS Functionality A Distribution System DS is a wired connection between two or more APs while a Wireless Distribution System WDS is a...

Страница 24: ...niques are shown in the table below STP Spanning Tree Protocol RSTP Rapid STP R STP detects and breaks network loops and provides backup links between switches bridges or routers It allows a bridge to...

Страница 25: ...ne external RADIUS server Use the embedded RADIUS server to authenticate up to 32 users You can also use an external RADIUS server to authenticate a potentially unlimited number of users Backup RADIUS...

Страница 26: ...eless LAN Channel Usage The Wireless Channel Usage screen displays which radio channels are being used by other wireless devices within the transmission range of the NOA 3570 This allows you to select...

Страница 27: ...570 Figure 3 Access Point Application 1 3 2 AP Bridge In AP Bridge mode the NOA 3570 supports both AP connections A and B can connect to the wired network through X and bridge connections X can commun...

Страница 28: ...nd establish wireless links with other APs In bridge mode the NOA 3570s see A and B in Figure 5 on page 35 are connected to independent wired networks and have a bridge A can communicate with B connec...

Страница 29: ...NOA 3570 User s Guide 36 Chapter 1 Getting to Know Your NOA 3570 Figure 6 Repeater Application...

Страница 30: ...to 1024 by 768 pixels 2 2 Accessing the NOA 3570 Web Configurator 1 Make sure your NOA 3570 hardware is properly connected refer to the Quick Start Guide 2 Prepare your computer computer network to co...

Страница 31: ...e Administrator Inactivity Timer field expires default five minutes Simply log back into the NOA 3570 if this happens to you 2 3 Resetting the NOA 3570 If you forget your password or cannot access the...

Страница 32: ...oad on your terminal 3 This is an example Xmodem configuration upload using HyperTerminal Click Transfer then Send File to display the following screen Figure 9 Example Xmodem Upload 4 After a success...

Страница 33: ...EM General This screen contains administrative and system related information Password Use this screen to change your password Time Setting Use this screen to change your NOA 3570 s time and date sett...

Страница 34: ...o view the logs for the categories that you selected Log Settings Use this screen to change your NOA 3570 s log settings MAINTENANCE Status This screen contains administrative and system related infor...

Страница 35: ...NOA 3570 User s Guide 42 Chapter 2 Introducing the Web Configurator...

Страница 36: ...wizard helps you configure your NOA 3570 for wireless stations to access your wired LAN Note Click Next in each screen to continue or click Back to return to the previous screen Your settings are not...

Страница 37: ...Panel Network Click the Identification tab note the entry for the Computer Name field and enter it as the System Name In Windows 2000 click Start Settings Control Panel and then double click System C...

Страница 38: ...The channel only can setup in Channel 01 11 The following table describes the labels in this screen Table 5 Wizard Wireless LAN Setup...

Страница 39: ...ters or 26 hexadecimal characters 0 9 A F You must configure all four keys but only one key can be activated at any one time The default key is key 1 Back Click Back to return to the previous screen N...

Страница 40: ...ED screens to configure other features the congratulations screen shows next IP Address Enter the IP address of your NOA 3570 in dotted decimal notation Note If you changed the NOA 3570 s IP address y...

Страница 41: ...NOA 3570 User s Guide 48 Chapter 3 Wizard Setup Figure 16 Wizard Setup Complete Well done You have set up your NOA 3570 to operate on your network and access the Internet...

Страница 42: ...en double click System Click the Network Identification tab and then the Properties button Note the entry for the Computer name field and enter it as the System Name In Windows XP click Start My Compu...

Страница 43: ...characters long Spaces are not allowed but dashes and underscores _ are accepted Domain Name This is not a required field Leave this field blank or enter the domain name here if you know it Administr...

Страница 44: ...ght displays the read only DNS server IP address that the DHCP assigns Select User Defined if you have the IP address of a DNS server Enter the DNS server s IP address in the field to the right If you...

Страница 45: ...Figure 19 Time Setting Table 8 Password LABEL DESCRIPTIONS Old Password Type in your existing system password 1234 is the default password New Password Type your new system password up to 31 character...

Страница 46: ...isplays the last updated time from the time server When you select None in the Time Protocol field enter the new time in this field and then click Apply Current Date yyyy mm dd This field displays the...

Страница 47: ...NOA 3570 User s Guide 54 Chapter 4 System Screens...

Страница 48: ...570 are data encryption wireless client authentication restricting access by device MAC address and hiding the NOA 3570 identity 5 2 1 Encryption Use WPA security if you have WPA aware wireless client...

Страница 49: ...ESSID and WEP in the Wireless screen 2 Use the MAC Filter screen to restrict access to your wireless network by MAC address 3 Configure WPA or WPA PSK in the 802 1x WPA screen You can also configure...

Страница 50: ...is the bridge with the lowest identifier value MAC address Path cost is the cost of transmitting a frame onto a LAN through that port It is assigned according to the speed of the link to which a port...

Страница 51: ...network topology 5 3 4 STP Port States STP assigns five port states see next table to eliminate packet looping A bridge port is not allowed to go directly from blocking state to forwarding state so as...

Страница 52: ...5 5 1 Access Point Mode Select Access Point in the Operating Mode drop down list box to display the screen as shown next Channel selection only can choose 1 11ch Figure 20 Wireless Access Point 21dBm...

Страница 53: ...NOA 3570 to use a channel select a channel from the drop down list box Click MAINTENANCE and then the Channel Usage tab to open the Channel Usage screen to make sure the channel is not already used b...

Страница 54: ...ut power of the NOA 3570 to reduce interference with other APs The options are 21dBm 19dBm 17dBm or 15dBm Preamble Preamble is used to signal that data is coming to the receiver Short preamble increas...

Страница 55: ...adcast traffic to circle the network endlessly resulting in possible throughput degradation and disruption of communications The following examples show two network topologies that can lead to this pr...

Страница 56: ...d to the same wired LAN as shown next Figure 23 Bridge Loop Bridge Connected to Wired LAN To prevent bridge loops ensure that you enable STP in the Wireless screen or your NOA 3570 is not set to bridg...

Страница 57: ...first WLAN adapter for AP functions and use the second WLAN adapter for bridge functions Operating Mode Select Bridge Repeater in this field to display the screen shown above Enable WDS Security A Wir...

Страница 58: ...ise clear the check box to disable it Remote Bridge MAC Address Type the MAC address of the peer device in a valid MAC address format that is six hexadecimal character pairs for example 12 34 56 78 9a...

Страница 59: ...apter 5 Wireless LAN Figure 25 Wireless AP Bridge See Table 13 on page 60 and Table 14 on page 64 descriptions of the fields in the Access Point and Bridge Repeater operating modes for descriptions of...

Страница 60: ...es Allow Association or exclude up to 32 devices from accessing the NOA 3570 Deny Association Every Ethernet device has a unique MAC Media Access Control address The MAC address is assigned at the fac...

Страница 61: ...he following table describes the labels in this screen Table 15 MAC Address Filter NOA 3570 LABEL DESCRIPTION WLAN Adapter Select the WLAN adapter for which you want to configure MAC address filtering...

Страница 62: ...n in Figure 27 on page 70 With roaming a wireless LAN mobile user enjoys a continuous connection to the wired network through an access point while moving around the wireless LAN Enable roaming to exc...

Страница 63: ...P 2 for reauthentication 5 7 1 Requirements for Roaming The following requirements must be met in order for wireless stations to roam between the coverage areas 1 All the access points must be on the...

Страница 64: ...ords into the AP and all wireless clients The Pre Shared Key PSK must consist of between 8 and 63 ASCII characters including spaces and symbols Table 16 Roaming LABEL DESCRIPTION Active Select Yes fro...

Страница 65: ...port number default is 1812 and the RADIUS shared secret A WPA application example with an external RADIUS server looks as follows A is the RADIUS server DS is the distribution system 1 The AP passes...

Страница 66: ...ouse Data Communications AEGIS client The Windows XP patch is a free download that adds WPA capability to Windows XP s built in Zero Configuration wireless client However you must run Windows XP to us...

Страница 67: ...cess to the wired network select a control method from the drop down list box Choose from No Access Allowed No Authentication Required and Authentication Required No Access Allowed blocks all wireless...

Страница 68: ...NOA 3570 User s Guide Chapter 5 Wireless LAN 75 Figure 32 Wireless LAN 802 1x WPA for 802 1x Protocol...

Страница 69: ...wireless station from the wired network after a period of inactivity The wireless station needs to enter the username and password again before access to the wired network is allowed This field is act...

Страница 70: ...word up to 31 alphanumeric characters as the key to be shared between the external authentication server and the NOA 3570 The key must be the same on the external authentication server and your NOA 35...

Страница 71: ...Required WPA Select Authentication Required in the Wireless Port Control field and WPA in the Key Management Protocol field to display the next screen Figure 33 Wireless LAN 802 1x WPA for WPA Protoco...

Страница 72: ...dynamic WEP key exchange with IEEE 802 1x in the same Wi Fi network Select Enable to activate WPA mixed mode Otherwise select Disable WPA Group Key Update Timer The WPA Group Key Update Timer is the r...

Страница 73: ...in this field Pre Shared Key The encryption mechanisms used for WPA and WPA PSK are the same The only difference between the two is that WPA PSK uses a simple common password instead of user specific...

Страница 74: ...verview The NOA 3570 has a built in RADIUS server that can authenticate wireless clients or other APs that are configured as trusted APs The NOA 3570 can function as an AP and as a RADIUS server at th...

Страница 75: ...password check box When authentication begins a pop up dialog box requests you to type a Name Password and Domain of the RADIUS server Specify a name and password only do not specify a domain Click t...

Страница 76: ...factory default certificate common to all NOA 3570 s that use certificates Note ZyXEL recommends that you replace the factory default certificate with one that uses your NOA 3570 s MAC address Do this...

Страница 77: ...With self signed certificates this is the same information as in the Subject field Valid From This field displays the date that the certificate becomes applicable The text displays in red and includes...

Страница 78: ...r 6 4 Configuring Trusted AP To specify APs as trusted APs so they can use the NOA 3570 s internal RADIUS server to authenticate wireless clients click the AUTH SERVER link under ADVANCED and then the...

Страница 79: ...et Enter a password up to 31 alphanumeric characters no spaces as the key for encrypting communications between the AP and the NOA 3570 The key is not sent over the network This key must be the same o...

Страница 80: ...for this user account This name can be up to 31 alphanumeric characters long including spaces The wireless client s utility must use this name as its login name Password Type a password up to 31 ASCII...

Страница 81: ...NOA 3570 User s Guide 88 Chapter 6 Internal RADIUS Server...

Страница 82: ...e MAC header of a frame to identify VLAN membership The NOA 3570 can identify VLAN tags for incoming Ethernet frames and add VLAN tags to outgoing Ethernet frames 7 1 1 Management VLAN ID The manageme...

Страница 83: ...up in order to manage the NOA 3570 This can be done in the following ways The management computer could be a wireless client of the NOA 3570 if the NOA 3570 s WLAN adapter is set to add the add the ma...

Страница 84: ...ve a single user account and the ISP will assign you a dynamic IP address when the connection is established The Internet Assigned Number Authority IANA reserved this block of addresses specifically f...

Страница 85: ...all organization and your Internet access is through an ISP the ISP can provide you with the Internet addresses for your local networks On the other hand if you are part of a much larger organization...

Страница 86: ...is using a static IP address When you select this option fill in the fields below IP Address Enter the IP address of your NOA 3570 in dotted decimal notation Note If you change the NOA 3570 s IP addre...

Страница 87: ...NOA 3570 User s Guide 94 Chapter 8 IP Screen...

Страница 88: ...ust be kept secure Public key encryption in general works as follows 1 Tim wants to send a private message to Jenny Tim generates a public key pair What is encrypted with one key can only be decrypted...

Страница 89: ...e available in some areas You can have the NOA 3570 act as a certification authority and sign its own certificates 9 3 Configuration Summary This section summarizes how to manage certificates on the N...

Страница 90: ...er deleting expired or unnecessary certificates before adding more certificates Replace This button displays when the NOA 3570 has the factory default certificate The factory default certificate is co...

Страница 91: ...able Valid To This field displays the date that the certificate expires The text displays in red and includes an Expiring or Expired message if the certificate is about to expire or has already expire...

Страница 92: ...Enhanced Mail PEM format uses 64 ASCII characters to convert a binary PKCS 7 certificate into a printable form 9 6 Importing a Certificate Click CERTIFICATES My Certificates and then Import to open th...

Страница 93: ...rtificate with a certification authority or generate a certification request see the following figure Table 29 My Certificate Import LABEL DESCRIPTION File Path Type in the location of the file you wa...

Страница 94: ...in every field although the Common Name is mandatory The certification authority may add fields such as a serial number to the subject information when it issues a certificate It is recommended that e...

Страница 95: ...request and enroll for a certificate immediately online to have the NOA 3570 generate a request for a certificate and apply to a certification authority for a certificate You must have the certificati...

Страница 96: ...cate Create screen Make sure that the certification authority information is correct and that your Internet connection is working properly if you want the NOA 3570 to enroll a certificate online 9 8 M...

Страница 97: ...NOA 3570 User s Guide 104 Chapter 9 Certificates Figure 47 My Certificate Details...

Страница 98: ...he certification path Certificate Information These read only fields display detailed information about the certificate Type This field displays general information about the certificate CA signed mea...

Страница 99: ...ingerprint This is the certificate s message digest that the NOA 3570 calculated using the MD5 algorithm SHA1 Fingerprint This is the certificate s message digest that the NOA 3570 calculated using th...

Страница 100: ...information about the certificate s owner such as CN Common Name OU Organizational Unit or department O Organization or company and C Country It is recommended that each certificate have unique subje...

Страница 101: ...certificates issued by the certification authority Otherwise the field displays No Details Select a certificate s radio button and click Details to open a screen with an in depth list of information...

Страница 102: ...rity s certificate change the certificate s name and set whether or not you want the NOA 3570 to check a certification authority s list of revoked certificates before trusting a certificate issued by...

Страница 103: ...NOA 3570 User s Guide 110 Chapter 9 Certificates Figure 50 Trusted CA Details...

Страница 104: ...rtification Authority signed the certificate Self signed means that the certificate s owner signed the certificate not a certification authority X 509 means that this certificate was created and signe...

Страница 105: ...he phone for example that this is actually their certificate SHA1 Fingerprint This is the certificate s message digest that the NOA 3570 calculated using the SHA1 algorithm You can use this value to v...

Страница 106: ...ator allows you to look at all of the NOA 3570 s logs in one location Click LOGS to open the View Log screen The View Log screen displays logs for the categories that you selected in the Log Settings...

Страница 107: ...he number of categories shown in the drop down list box depends on the selection in the Log Settings page Email Log Now Click Email Log Now to send the log screen to the e mail address specified in th...

Страница 108: ...ch logs and or immediate alerts the NOA 3570 is to send An alert is a type of log that warrants more serious attention Some categories such as System Errors consist of both logs and alerts You may dif...

Страница 109: ...NOA 3570 LABEL DESCRIPTION Address Info Mail Server Enter the server name or the IP address of the mail server for the e mail addresses specified below If this field is left blank logs and alert mess...

Страница 110: ...ly Hourly When Log is Full None If the Weekly or the Daily option is selected specify a time of day when the E mail should be sent If the Weekly option is selected then also specify which day of the w...

Страница 111: ...NOA 3570 User s Guide 118 Chapter 10 Log Screens...

Страница 112: ...MAINTENANCE to open the System Status screen where you can use to monitor your NOA 3570 Note that these labels are READ ONLY and are meant to be used for diagnostic purposes Figure 53 System Status T...

Страница 113: ...is is the Ethernet port DHCP role Client or None Show Statistics Click Show Statistics to see router performance statistics such as number of packets sent and number of packets received for each port...

Страница 114: ...ime the line has been up Bridge Link This is the index number of the bridge connection Active This shows whether the bridge connection is activated or not Remote Bridge MAC Address This is the MAC add...

Страница 115: ...formation Figure 56 Channel Usage The following table describes the labels in this screen Table 39 Association List NOA 3570 LABEL DESCRIPTION WLAN 1 2 This identifies the WLAN adapter to which the li...

Страница 116: ...ndependent Basic Service Set IBSS as one that doesn t See Chapter 5 on page 55 for more information on basic service sets BSS and extended service sets ESS MAC Address This field displays the MAC addr...

Страница 117: ...ess screen wait two minutes before logging into the NOA 3570 again Table 41 Firmware Upload LABEL DESCRIPTION File Path Type in the location of the file you want to upload in this field or click Brows...

Страница 118: ...rary network disconnect In some operating systems you may see the following icon on your desktop Figure 59 Network Temporarily Disconnected After two minutes log in again and check your new firmware v...

Страница 119: ...6 Configuration Screen See Chapter 20 on page 169 for transferring configuration files using FTP TFTP commands Click MAINTENANCE and then the Configuration tab Information related to backing up config...

Страница 120: ...onfiguration to a file on your computer Once your NOA 3570 is configured and functioning properly it is highly recommended that you back up your configuration file before making configuration changes...

Страница 121: ...ng icon on your desktop Figure 63 Network Temporarily Disconnected If you uploaded the default configuration file you may need to change the IP address of your computer to be in the same subnet as tha...

Страница 122: ...ration information and returns the NOA 3570 to its factory defaults as shown on the screen The following warning screen will appear Figure 65 Reset Warning Message 11 7 Restart Screen System restart a...

Страница 123: ...NOA 3570 User s Guide 130 Chapter 11 Maintenance Figure 66 Restart Screen...

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды