Adding Access Points to the Valid AP Database | D-Link DWS 3000

Configuring the External RADIUS Server

VENDOR	D-Link	6132
#

#D-Link Vendor Specific Extensions

ATTRIBUTE	D-Link-Wireless-AP-Location		101	string	D-Link
ATTRIBUTE	D-Link-Wireless-AP-Mode		102	integer	D-Link
ATTRIBUTE	D-Link-Wireless-AP-Profile-ID		103	integer	D-Link
ATTRIBUTE	D-Link-Wireless-AP-Switch-IP		104	ipaddr	D-Link
ATTRIBUTE	D-Link-Wireless-AP-Radio-1-Chan		105	integer	D-Link
ATTRIBUTE	D-Link-Wireless-AP-Radio-2-Chan		106	integer	D-Link
ATTRIBUTE	D-Link-Wireless-AP-Radio-1-Power		107	integer	D-Link
ATTRIBUTE	D-Link-Wireless-AP-Radio-2-Power		108	integer	D-Link
VALUE D-Link-Wireless-AP-Mode		WS-Managed			1
VALUE D-Link-Wireless-AP-Mode		Rogue			3
VALUE D-Link-Wireless-AP-Radio-1-Chan		Auto			0
VALUE D-Link-Wireless-AP-Radio-2-Chan		Auto			0
VALUE D-Link-Wireless-AP-Radio-1-Power		Auto			0
VALUE D-Link-Wireless-AP-Radio-1-Power		Minimum			1
VALUE D-Link-Wireless-AP-Radio-1-Power		Maximum			100
VALUE D-Link-Wireless-AP-Radio-2-Power		Auto			0
VALUE D-Link-Wireless-AP-Radio-2-Power		Minimum			1
VALUE D-Link-Wireless-AP-Radio-2-Power		Maximum			100

After you create an attribute dictionary file, you must insert an INCLUDE statement into the the main file dictionary for the FreeRADIUS server.

The main dictionary is etc/raddb/dictionary. The following example shows an INCLUDE statement for the D-Link attribute dictionary called dictionary.D-Link.

$INCLUDE dictionary.D-Link

Adding Access Points to the Valid AP Database

You use the attributes you define in the dictionary file to configure the settings for an access point in the Valid AP database on the RADIUS server. The file you configure is the etc/raddb/users file. The following code is an example of a database entry for an AP with the MAC address 00:11:95:a3:32:80.

NOTE: In the FreeRADIUS database, the MAC address is case sensitive, and the octets must be separated by hyphens.

00-11-95-a3-32-80 Auth-Type := Local, User-Password=="NOPASSWORD"

D-Link-Wireless-AP-Mode = WS-Managed,

D-Link-Wireless-AP-Location = "Lobby AP",

D-Link-Wireless-AP-Profile-ID = 1,

D-Link-Wireless-AP-Switch-IP = 192.168.30.4,

D-Link-Wireless-AP-Radio-1-Chan = Auto,

D-Link-Wireless-AP-Radio-2-Chan = Auto,

D-Link-Wireless-AP-Radio-1-Power = Auto,

D-Link-Wireless-AP-Radio-2-Power = Auto

FreeRADIUS Server Configuration Example 183

Image 183

D-Link DWS 3000 user manual Adding Access Points to the Valid AP Database

Contents

Copyright 2006. All rights reserved Precaución FCC WarningCE Mark Warning Warnung Table of Contents Installing the D-Link Unified Access System Managing and Maintaining D-Link Access Points Configuring the External Radius Server Technical Support Page List of Tables Page Sample Wlan Visualization List of Figures WPA Personal Configuration Organization Symbol Description ExampleAbout This Document Audience Safety Cautions Safety Instructions Safety Instructions General Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge Battery Handling ReminderPage Overview of the D-Link Unified Access System Link Unified Access System ComponentsLink Wlan Controller Switch Wlan Visualization Link Access Point Single WCS Deployment Link Unified Access System Topology Single WCS with Layer 2 Roaming Support Peer Switch WCS Deployment Peer WCS with Layer 3 Roaming Support Understanding the User Interfaces Web Interface Layout Using the Web Interface Navigation Menu Interface Configuration Graphic Tools Menu Using the Command-Line InterfaceConfiguration and Monitoring Options Wlan Tabs Using Snmp Tkip AES & Ccmp Wireless System Features and Standards Support CLI Syslog Tftp System Requirements Planning the D-Link Unified Access System Network Wlan Topology Considerations Link Unified Access System Components Wiring Closet Topology Access Point Placement Access Point-to-Switch Discovery Network Planning to Support Layer 3 Roaming Inter-Subnet Roaming Hardware Overview Installing the Hardware Front Panel Components LED Indicators For PoE Mode PowerPoE Mode For Link/Act/Speed Mode Combo SFP Ports Rear Panel DescriptionSide Panels 10GE Port LEDs Installation Package ContentsInstallation Guidelines Installing the Switch in a Rack Installing the Switch without the Rack Powering On the Switch Installing the SFP portsPower Failure Inserting the Fiber-Optic Transceivers into the Switch Installing the Optional Module Front Panel of the DEM-410X Install the Module Connecting to the External Redundant Power System Connecting the Switch Connecting the Switch and AP Directly Connecting the Switch to the Network Connecting to the Core Network Connecting the Switch and AP through the L2/L3 Network System Deployment Overview Installing the D-Link Unified Access SystemPage Connecting the Switch to the Network Field Description Enabling the Wlan Features on the Switch AP MAC Validation Disable ReasonAP Authentication IP Address Logging on to the AP Preparing the Access Points Configuring 802.1x Authentication Information on the AP Changing the AP Password Configuring AP-to-Switch Authentication Information Configuring Vlan Information on the Access PointAction Command Discovering Access Points and Peer Switches Understanding the Discovery MethodsExample 1 L2 Discovery L2 Discovery Example Example 2 IP Address of AP Configured in the Switch Example 4 Dhcp Option Example 3 IP Address of Switch Configured in the AP Assigning the IP Address to Switches and Managed APs Discovery and Peer Switches Link Wlan Controller Switch with Routing Enabled Link Wlan Controller Switch with Routing Disabled Switch-prompt Interface 0/2#ip address 192.168.1.24 Link Access Point Enabling the AP and Peer Switch Discovery Link Wireless Device Discovery Protocol Configuring IP Addresses of Peers and APs in the Switch L3/IP Discovery IP ListIP Address Range Setting the Switch IP Address in the D-Link Access Point WLAN-AP#get managed-ap Options Setting the Switch Information in the Dhcp Option Authenticating and Validating Access Points Configuring AP Authentication Requiring AP Authentication Using the Local Database for AP Validation Installing the D-Link Unified Access System Using the Radius Database for AP Validation Set the Radius server as the validation method Managing Failed or Rogue APs Configuring Access Point Settings Access Point ProfilesAP Profiles, Networks, and the Local Database Networks Local Access Point Database Accounting Configuring AAA and Radius SettingsGlobal Radius Server Secret MAC List Configuring Wireless Radio SettingsMAC Authentication Default Action Radio Settings RTS Threshold StateSuper a Super G Dynamic Turbo Supported RF Scan SentryRate Sets Basic Channel Dtim PeriodBeacon Period Automatic RF Scan Duration Automatic PowerInitial Power Advanced Radio Configuration Managing Virtual Access Point Configuration Configuring Ssid Settings Configuring the Default Network Wireless Network Configuration Configuring Network Settings L3 Tunnel Mask AuthenticationL3 Tunnel Status L3 Tunnel Subnet None Enabling and Configuring Additional VAPsAddress Radius Secret Networks Available to the Wireless Client Configuring a VAP for L3 Tunnels L3 Roaming Example Using No Security Configuring AP Security Static WEP Configuration Using Static or Dynamic WEP Static WEP Field Description WPA Personal Configuration Using WPA/WPA2 Personal or Enterprise Static WPA Field Description Static WPA FieldDescription Configuring Valid Access Point Settings Profile Valid Access Point SummaryManaged Mode Location Password Valid AP Configuration APs operate Page Resetting the Access Points Managing and Maintaining D-Link Access Points Configuring Channel Plan and Power Settings Managing Radio Frequency Settings RF Channel Plan and Power Configuration Interval RF Channel Plan and Power AdjustmentChannel Plan History Depth Channel Plan History Viewing the Channel Plan History Initiating Manual Channel Plan Assignments Manual Power Adjustments Initiating Manual Power Adjustments File Path Upgrading the Access Point SoftwareAP Upgrade Field Description Server Address Managed AP Group Size Success Count Performing Advanced Access Point ManagementStatus Download Count Debug Enabling AP Debugging AP Debug Field Description Adjusting the Channel and Power Power Status Page Monitoring Status and Statistics Monitoring Wireless Global Information Global Wlan Statistics Peer SwitchesTotal Access Managed Access Monitoring Status and Statistics Viewing IP Discovery Status Monitoring Peer Switch Status Monitoring All Access Points Clients Monitoring All Access PointsAuthenticated Firmware Version Managed Access Point Status Monitoring Managed Access Point Status Configuration Viewing Detailed Managed Access Point Status Detailed Managed Access Point Status Viewing Managed Access Point Radio Summary Information Managed AP Radio Detail Viewing Detailed Managed Access Point Radio InformationTransmit Power Managed AP Radio Summary Viewing Managed Access Point Neighbor APs Neighbor AP MAC Viewing Clients Associated with Neighbor Access PointsManaged AP Neighbor Status Ex -802.11g Viewing Managed Access Point VAPs Neighbor AP ClientsNeighbor Client Monitoring Managed AP Statistics Managed Access Point Ethernet Summary Statistics Viewing Managed Access Point Ethernet StatisticsViewing Detailed Managed Access Point Statistics Managed Access Point Wlan Summary Statistics Viewing Managed Access Point Radio Statistics Viewing Managed Access Point VAP Statistics Authentication Failed AP Status Viewing Access Point Authentication Failure Status Monitoring Rogue and RF Scan Access Points RF Scan Monitoring Associated Client Information Viewing Associated Client Status Associated Client Status SummaryTunnel IP Address Viewing Detailed Associated Client Status Viewing Associated Client Ssid Status Viewing Associated Client Neighbor AP StatusAssociated Client Neighbor AP Status Viewing Associated Client Statistics Viewing Associated Client VAP Status Transmit Retries Associated Client Association Summary StatisticsAssociated Client Summary Statistics Associated Client Association Detail Statistics Associated Client Session Detail Statistics Viewing Client Authentication Failure StatusTransmit Retries Failed Duplicates Received Failed Client Status Client Authentication Failure Status Authentication Failure Count Monitoring and Managing Ad Hoc ClientsAssociation Failure Count Ad Hoc Client Status Ad Hoc Clients Detection Mode Creating, Configuring, and Managing AP Profiles Configuring Advanced Settings Multiple AP Profiles Adding a Profile Creating, Copying, and Deleting AP Profiles Applying the AP Profile Applying an AP Profile Configuring Global Settings RF Scan Status Enabling Snmp TrapsAP Failure Status Client Failure Snmp Traps Field Description QoS Configuration Configuring QoS Queue QoS SettingsMinimum Contention Maximum Contention Max. Burst Length WMM Mode Txop Limit Page Visualizing the Wireless Network Click Wlan Visualization Download Image Importing and Configuring a Background Image Creating a New Graph Setting Up the Graph Components Importing and Configuring a Background Image on With a graph definition length of 800 feet Multiple Graphs Graphing the Wlan Components Component Tool Tip File Understanding the Menu Bar OptionsWlan Visualization Menu Bar Options Menu Item Description On page 166 shows the difference between the tab view View Help Options Sentry Mode Detailed View Tool Tip for Radio Managed AP Information Component Information Component Attributes Links/CommandsPeer Switch Managing the Graph Other AP Wireless Client Link Unified Access System Default Settings Default D-Link Wlan Controller Switch SettingsFeature Default Default D-Link Access Point Profile Settings AP Default AP Profile SettingsWlan Information Link Unified Access System Default Settings Other Settings Virtual Access Point and Network Settings Radius Server Description Range Usage Attribute Configuring the External Radius ServerConfiguring Radius Settings for Access Points Radius Attributes for the Access Point Radius Server Description Range Usage Attribute FreeRADIUS Server Configuration Example Configuring Radius ClientsCreating and Including an Attribute Dictionary Vendor Adding Access Points to the Valid AP Database Radius Attributes for Wireless Clients Configuring Radius Settings for Wireless ClientsFreeRADIUS Example for Wireless Client Configuration Configuring Radius for Client MAC Authentication Configuring User-Based Authentication and Dynamic VLANs Configuring MAC Authentication L3 Roaming Example Configuring the Wlan and Tunnel Interfaces Using a Loopback Interface for the Wireless Functions Creating the Vlan Routing Interface Create a Vlan routing interface on Vlan L3 Roaming Example Configuring the L3 Tunnel Network Example of Configuring L3 Roaming by Using the CLI Configured L3 Tunnel Status ValuesL3 Tunnel Status Description Switch-prompt#wireless ap profile apply Example of Configuring L3 Roaming by Using the Web Interface Configuring the Relay Agent Configuring Dhcp Relay and the Dhcp Server Configure the default router for the address pool Configuring the Dhcp Server L3 Roaming Example Setting the MTU Size Setting the MTU Size Page Understanding Quality of Service QoS and Load Balancing802.11e and WMM Standards Support QoS Queues and Dscp on Packets Coordinating Traffic Flow Edcf Control of Data Frames and Aifs Packet Bursting for Better Performance Random Backoff and Contention Windows 802.1p and Dscp tags Txop Interval for Client Stations Vlan Priority Dscp Value Vlan Priority Tags All countries and regions excluding USA Warranty and Registration Information Warranties Exclusive Limited Warranty HardwareSoftware Limited Warranty USA Only Limited Warranty USA Only Page Warranty and Registration Information Copyright Statement Link Europe Limited Product WarrantyProduct Registration Trademarks Limitation of Product Warranty Geographical Scope of the Limited Product Warranty Limited Product Warranty Period Performance of the Limited Product WarrantyProduct Type Product Warranty Period Warrantor Link Europe Limited Produktgarantie Räumlicher Geltungsbereich der eingeschränkten Garantie Einschränkung der GarantieLaufzeit der eingeschränkten Garantie Leistungsumfang der eingeschränkten Garantie GarantiegeberProdukttyp Gewährleistungslaufzeit Etendue géographique de la Garantie Produit Limitée Link Europe a limité la garantie des produits Limitation de la Garantie Produit Période de Garantie Produit LimitéeType de produit Période de Garantie Garantía limitada del producto D-LINK Europa Exécution de la Garantie Produit LimitéeGarant Limitación de la garantía del producto Cobertura geográfica de la garantía limitada del producto Período de la garantía limitada del producto Uso de la garantía limitada del productoTipo de producto Período de garantía del Producto Garante Link Europe Termini di Garanzia dei Prodotti Ambito geografico della Garanzia limitata Limitazione della GaranziaPeriodo di garanzia Londra NW9 5 AB Regno Unito Telefono +44-020-8731-5555 Prestazioni della Garanzia limitataPage Technical Support Technical Support Technical Support Technische Unterstützung Assistance technique Asistencia Técnica Supporto tecnico Tech Support for customers within the Netherlands Pomoc techniczna Technická podpora Technikai Támogatás Teknisk Support Link teknisk support på Internettet Teknistä tukea asiakkaille Suomessa Teknisk Support för kunder i Sverige Tech Support for customers within Australia Suporte Técnico Τεχνική Υποστήριξη Emailsupport@dlink.com.sg Tech Support for customers within India Tech Support for customers within the Russia Technical Support Emailsupport@d-link.co.za Tech Support for Latin America customers Техническая поддержка Asistencia Técnica Suporte Técnico 技术支持友冠技術支援 Europe U. K International Offices Product Model Product Serial No Registration Information Registration Information