SIMREX DataMover ESS, Руководство пользователя

Страница: 90 / 188

82 DataMover ESS User’s Guide SIMREX MAN.ESS-01, Rev. F
SIMREX Corporation
•
View Approved Remotes
—Simple listing of approved Remotes by
MAC address, of radios authorized to join this AP. If a Remote
is not in this list, it will not be able to associate with this AP.
•
Save Changes
—Saves all changes made during the session with
this menu. Changes are implemented only if they are “saved”
before exiting this menu.
3.7.3 RADIUS Authentication
This section covers the configuration needed for the ESS radios to
access the RADIUS server, which is used for Device Level Security and
for Wireless Access Security. SIMREX does not provide the RADIUS
server software.
Operation of Device Authentication
Device authentication forces the radio to authenticate before allowing
user traffic to traverse the wireless network. When Device Security is
configured to use RADIUS as the Authentication Method, Remote
radios need three types of certificates: public (client), private, and root
(Certificate Authority). These files are unique to each Remote radio and
need to first be created at the server and then installed into each unit via
TFTP. The certificate files must be in DER format.
Device authentication uses the serial number of each radio as the
Common Name (CN) in its certificate and in its RADIUS identity field.
Each Access Point
and Remote radio must be identified/recognized by
the RADIUS Server through the Common Name (Serial number) and IP
address entries.
NOTE:
Consult your RADIUS network administrator for assistance in
configuration, or for help with other issues that may arise.
To activate device authentication, select
Device Auth Method
and set
RADIUS
as the active mode. The behavior of this setting differs
depending on whether it is implemented on an Access Point or a Remote
transceiver. An explanation of these behaviors is given below:
Access Point: When
Device Auth Method
is set to
RADIUS
, the AP disasso-
ciates all associated Remotes and waits for the RADIUS Server to
Authenticate the Remotes before allowing data to be passed from them.
When approval is received from the RADIUS Server, data from the
Remote is allowed to pass.
Remote: When
Device Auth Method
is set to
RADIUS
, the Remote halts any
data it is passing, and requests Authentication from the RADIUS Server.
If accepted, data is allowed to be transmitted.