HP Cloud Network Manager Software Configuring dynamic RADIUS proxy parameters, CoA, CoA only, 4.Click Save Server

Data pane item	Description
ADMIN-DN	Enter a distinguished name for the admin user with read/search privileges across
	all the entries in the LDAP database (the admin user need not have write
	privileges, but the admin user must be able to search the database, and read
	attributes of other users in the database).
ADMIN	Enter a password for the admin.
PASSWORD
RETYPE ADMIN	Retype the password for the admin.
PASSWORD
BASE-DN	Enter a distinguished name for the node that contains the entire user database.
FILTER	Specify the filter to apply when searching for a user in the LDAP database. The
	default filter string is (objectclass=*).
KEY ATTRIBUTE	Specify the attribute to use as a key while searching for the LDAP server. For Active
	Directory, the value is sAMAccountName.
TIMEOUT	Enter a value between 1 and 30 seconds. The default value is 5.
RETRY COUNT	Enter a value between 1 and 5. The default value is 3.

nCoA — To configure a CoA, select CoA only. The RADIUS server is automatically selected.

Table 23: Parameters for CoA

Data pane item	Description
NAME	Enter the name of the server.
IP ADDRESS	Enter the IP address of the server.
BONJOUR	Enter a port number for sending Bonjour support CoA on a different port than on
SUPPORT CoA	the standard CoA port. The default value is 5999.
PORT
SHARED KEY	Enter a shared key for communicating with the external RADIUS server.
RETYPE KEY	Re-enter the shared key.

4.Click Save Server.

To assign the RADIUS authentication server to a network profile, select the newly added server when configuring security settings for a wireless or wired network profile.

You can also add an external RADIUS server by selecting New for Authentication Server when configuring a WLAN or wired profile. For more information, see Configuring security settings for a WLAN SSID profile on page 27.

Configuring dynamic RADIUS proxy parameters

The RADIUS server can be deployed at different locations and VLANs. In most cases, a centralized RADIUS or local server is used to authenticate users. However, some user networks can use a local RADIUS server for employee authentication and a centralized RADIUS based captive portal server for guest authentication. To

51 Wireless configuration HP Cloud Network Manager User Guide