Nortel Networks 2300 manual Configuring Communication with Radius, Radius Overview

477

Configuring Communication with RADIUS

RADIUS Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477

Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 479

Configuring RADIUS Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 479

Configuring RADIUS Server Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 483

RADIUS and Server Group Configuration Scenario . . . . . . . . . . . . . . . . . . . . . . . . . 487

For a list of the standard and extended RADIUS attributes and Nortel vendor-specific attributes (VSAs) supported by WSS Software, see “Supported RADIUS Attributes,” on page 599.

RADIUS Overview

Remote Authentication Dial-In User Service (RADIUS) is a distributed client-server system. RADIUS servers provide a repository for all usernames and passwords, and can manage and store large groups of users.

RADIUS servers store user profiles, which include usernames, passwords, and other AAA attributes. You can use autho- rization attributes to authorize users for a type of service, for appropriate servers and network segments through VLAN assignments, for packet filtering by access control lists (ACLs), and for other services during a session.

You must include RADIUS servers in a server group before you can access them. (See “Configuring RADIUS Server Groups” on page 483.)

Figure 20 on page 478 illustrates the interactions between wireless users (clients), AP access ports, an WSS switch, and its attached RADIUS servers when the clients attempt access.

Nortel WLAN Security Switch 2300 Series Configuration Guide