D-Link DWS 3000 Configuring the External Radius Server, Radius Attributes for the Access Point

B

Configuring the External RADIUS Server

You can store the Valid AP configuration on a local database on the D-Link WLAN Controller Switch or on an external RADIUS server. This appendix describes the attributes you must define for each feature to setup their configuration on the RADIUS server.

One important reason why you might define the AP information on the RADIUS server rather than on the switch is to allow peer switches to obtain the data from a single source rather than having to define it on each switch.

Configuring RADIUS Settings for Access Points

Since the AP is identified by its physical MAC address, you must add a RADIUS entry for each AP with the User-Name attribute set to the MAC address. Table 60 indicates the attributes to configure in the RADIUS server entry for each AP. Add the vendor-specific attributes by using the D-Link vendor ID (6132) and the identifier D-Link-Wireless-AP-* (where “*” represents the attribute name).

NOTE: This appendix does not describe RADIUS configuration for AP network authentication using 802.1x. This feature is separate from a valid AP configuration entry. The edge device that connects to the AP performs the network authentication. The edge device might not be the D-Link WLAN Controller Switch.

Table 60. RADIUS Attributes for the Access Point

RADIUS Server	Description	Range	Usage
Attribute
User-Name (1)	Ethernet Address of the AP.	Valid Ethernet MAC	Required
		Address
User-Password (2)	A fixed password used to	8-63 characters, default	Required
	lookup an AP entry.	NOPASSWORD
Vendor-Specific (26)	A description for the AP,	1-32 characters	Optional
Location	often based on its location.

Configuring RADIUS Settings for Access Points 179