Proxim AP-2500 Notes Concerning RADIUS

AP-2500 Authentication Methods

3. Client sends AP its login credentials (User name/password or MAC address).

4. AP checks its Authorized Subscribers Table. If the client is not listed, the AP forwards the authentication request to

the RADIUS server.

5. The RADIUS server authenticates the user based on the client’s login credentials and notifies AP of successful

authentication.

6. AP changes the client’s State to “Valid” in its Current Subscribers Table and redirects the client to the requested

Web page or to the site specified by Home Page Redirection settings.

7. AP sends an accounting “start” message to the RADIUS server.

• This assumes that RADIUS accounting is enabled.

• Note that you can use the same server for RADIUS authentication and accounting or two different RADIUS

servers: one for authentication and one for accounting).

8. RADIUS server sends an acknowledgment back to the AP that the accounting message was successfully

received.

• This assumes that RADIUS accounting is enabled.

• In addition to sending an accounting “start” message when a subscriber logs in, the AP also sends an

accounting “stop” message when the subscriber logs out or times out. Also, the AP can send interim

accounting messages at a specified interval (but not less than every two minutes).

Notes Concerning RADIUS

• Subscribers authenticated by RADIUS can logout of their Internet sessions in one of three ways:

– By clicking the Logout button found on the ICC (if enabled).

• See Information and Control Console (ICC) and Potential End User Issues for more information and a list

of known issues.

– By typing http://1.1.1.1/ in their Web browser.

– By clicking a link to http://1.1.1.1/ that you add to a custom Portal Page.

• Subscribers authenticated by RADIUS are logged out automatically in one of two ways:

–Idle timer expires.

–Session timer expires.

(These two timers are RADIUS attributes that you can configure for the subscribers in your RADIUS database. See

RADIUS Messages and RADIUS Attributes for details.)

•See RADIUS for more information on the AP’s RADIUS implementation.

Configuration Instructions

The configuration instructions are divided into two topics:

•Install and Configure RADIUS

•Configure the AP-2500

Before you install or configure the AP-2500, you should first install and configure the RADIUS server on your network.

There are multiple RADIUS applications available. Popular RADIUS servers include Microsoft’s Internet Authentication

Service (IAS), Funk’s Steel-belted RADIUS, and Lucent Navis RADIUS. Microsoft’s IAS server is included with

Windows 2000 Server.

Since your specific installation and configuration steps will vary based on the RADIUS server you select, the following

instructions are only an overview of the process. Refer to the documentation included with your RADIUS server for

detailed instructions.

NOTE

Contact your RADIUS server manufacturer if you have problems configuring the server or have problems

using RADIUS authentication and/or accounting.