49
RADIUS servers. When the primary RADIUS server fails to respond, the wireless ac-
cess point will try to communicate with the secondary RADIUS server. You can specify
the length of timeout and the number of retries before communicating with the secon-
dary RADIUS server after failing to communicate with the primary RADIUS server.
An IEEE 802.1x-capable wireless access point and its RADIUS server(s) share a secret
key so that they can authenticate each other. In addition to its IP address, a wireless
access point can identify itself by an NAS (Network Access Server) identifier. Each
IEEE 802.1x-capable wireless access point must have a unique NAS identifier.
Fig. 53. IEEE 802.1x/RADIUS settings.
TIP: Refer to the IEEE 802.1x-related white papers on the companion CD-ROM for
more information about deploying secure WLANs with IEEE 802.1x support.