Configuring Radius Profiles | Proxim AP-700 specification

Advanced Configuration

AP-700 User Guide

Radius Profiles

Figure 4-33 RADIUS Servers per VLAN

This figure shows a network with separate authentication servers for each authentication type and for each VLAN. The clients in VLAN 1 are authenticated using the authentication servers configured for VLAN 1. The type of authentication server used depends on whether the authentication is done for an 802.1x client or a non-802.1x client. The clients in VLAN 2 are authenticated using a different set of authentication servers configured for authenticating users in VLAN 2.

Authentication servers for each VLAN are configured as part of the configuration options for that VLAN. RADIUS profiles are independent of VLANs. The user can define any profile to be the default and associate all VLANs to that profile. Four profiles are created by default, “MAC Authentication”, “EAP Authentication”, Accounting”, and “Management”.

RADIUS Servers Enforcing VLAN Access Control

A RADIUS server can be used to enforce VLAN access control in two ways:

•Authorize the SSID the client uses to connect to the AP. The SSID determines the VLAN that the client gets assigned to.

•Assigning the user to a VLAN by specifying the VLAN membership information of the user.

Configuring Radius Profiles

A RADIUS server Profile consists of a Primary and a Secondary RADIUS server that get assigned to act as either MAC Authentication servers, 802.1x/EAP Authentication servers, or Accounting Servers in the VLAN Configuration. See Configuring Security Profiles.

The RADIUS Profiles Sub-tab allows you to add new RADIUS profiles or modify or delete existing profiles.

97

Image 97

Proxim AP-700 manual Configuring Radius Profiles, Radius Servers Enforcing Vlan Access Control

Contents

ORiNOCO AP-700 Access Point User Guide Trademarks CopyrightOpenSSL License Note AP-700 User Guide Contents Management Contents AP-700 User Guide Troubleshooting CommandsMonitoring General Notes Command Line Interface CLI Statement of Warranty Ascii Character Chart C SpecificationsTechnical Support Regulatory Compliance AP-700 User Guide Introduction Introduction to Wireless NetworkingDocument Conventions Guidelines for Roaming Ieee 802.11 SpecificationsIntroduction AP-700 User Guide Management and Monitoring Capabilities Command Line InterfaceHTTP/HTTPS Interface SSH Secure Shell Management Snmp ManagementSNMPv3 Secure Management Page AP-700 Hardware Description Installation and InitializationOverview Antennas Installation and Initialization AP-700 User GuideExternal Antennas Active Ethernet LED Indicators Prerequisites Installation and Initialization AP-700 User Guide System Requirements Product Package Required Materials Hardware InstallationCabling the AP-700 Mounting the AP-700 Installing the Security CoverMounting the AP-700 to a Ceiling AP-700 Mounting Plate Mounting the AP-700 to a Wall Installing External Antennas Opening the Antenna Compartment Installing the AP in a Plenum Initialization Using ScanToolScanTool Instructions Scan List Enter Network Password screen appears Click LAN SettingsLogging Select Tools Internet Options 11 System Status Screen Using the Setup Wizard 12 Setup Wizard Setup Wizard Instructions Installing the Software Click Commands Update AP via Http Install Software with Http Interface Install Software with Tftp Server Click Commands Reboot Related Topics Install Updates from your Tftp Server using the CLI System Status Screen System Status Advanced Configuration Configure Main Screen Advanced Configuration AP-700 User Guide Dynamic DNS Support SystemPage Network IP Configuration DNS Client Dhcp ServerAdvanced Start IP Address End IP Address Advanced Configuration AP-700 User Guide NetworkComment optional Dhcp Relay Agent Dhcp Server IP Address Table Dhcp Relay Agent Target IP Address Comment optional Link Integrity Sntp Simple Network Time Protocol Link Integrity Configuration Screen Sntp Configuration Screen Advanced Configuration AP-700 User Guide Network Interfaces Operational Mode Super Mode and Turbo Mode Advanced Configuration AP-700 User Guide InterfacesConfiguring 802.11d Support Ieee 802.11d Support for Additional Regulatory Domains Configuring TX Power Control TX Power Control/Transmit Power Level 10 Wireless Interface Wireless 802.11a/b/g RadioPage Affected Countries Dynamic Frequency Selection/Radar Detection DFS/RD RTS/CTS Medium Reservation Wireless Service Status Click on Configure Interfaces Wireless Traps Generated During Wireless Service Shutdown and ResumeSet Blacklist Status to Enable Channel Blacklist Table Bridging WDS 13 WDS Example 14 WDS Configuration WDS Setup Procedure 15 Adding WDS Links Ethernet 16 Ethernet Sub-tab Management Passwords Services IP Access TableSecure Management Snmp Settings Advanced Configuration AP-700 User Guide ManagementHttp Access Https Access Secure Socket Layer 17 Management Services Configuration Screen Configuring SSH SSH Session SetupSSH Clients Uploading Externally Generated Host Keys Click Commands Update AP via Http or via Tftp Radius Based Management Access Serial Configuration Settings Auto Configuration and the CLI Batch File Automatic Configuration AutoConfigSet up Automatic Configuration for Static IP Set up Automatic Configuration for Dynamic IP 19 Automatic Configuration Screen 20 Dhcp Options Setting the Boot Server Host Name Hardware Configuration Reset Chrd Configuring Hardware Configuration Reset Configuration Reset via Serial Port During BootupClick Configure Management Chrd Procedure to Reset Configuration via the Serial Interface Ethernet Protocol FilteringStatic MAC Select the Filter Operation Type Advanced Configuration AP-700 User Guide Filtering Wireless MAC Address 00022D5194E4 Wired MAC Address 0040F41CDB6AWired MAC Address Wireless MAC Address 0020A6124E38 TCP/UDP Port AdvancedNumber Click Add under the TCP/UDP Port Filter Table heading Click Edit under the TCP/UDP Port Filter Table heading Editing TCP/UDP Port Filters Groups Alarms Operational Trap Group Trap Name Description Severity Level Security Trap Group Trap Name Description Severity Level Flash Memory Trap Group Trap Name Description Severity Level Trap Name Description Severity Level Tftp Trap Group Trap Name Description Severity Level Alarm Host TableImage Trap Group Trap Name Description Severity Level Sntp Trap Group Trap Name Description Severity Level Advanced Configuration AP-700 User Guide Alarms Syslog Configuring Syslog Event NotificationsEvent Priority Description Syslog Message Name Priority Severity Description Syslog Messages Advanced Configuration AP-700 User Guide 25 Preventing Rogue AP Attacks Rogue Scan Background Scanning Mode Continuous Scanning ModeMulti-Band Scanning Rogue Scan Data Collection Rogue Scan Click Configure Alarms Rogue Scan 26 Rogue Scan Screen Spanning Tree Bridge Storm Threshold Advanced Configuration AP-700 User Guide Bridge Intra BSS Configuring Interfaces for Packet ForwardingPacket Forwarding Click Configure QoS Policy Wireless Multimedia Extensions WME/Quality of Service QoSQoS Enabling QoS and Adding QoS policies Enter the Priority Mapping Index Advanced Configuration AP-700 User Guide QoS Priority Mapping Click Configure QoS Priority Mapping STA Edca Table and AP Edca Table Enhanced Distributed Channel Access Edca 32 Edca Tables Advanced Configuration AP-700 User Guide QoS Radius Profiles Radius Servers per Authentication Mode and per Vlan Radius Servers Enforcing Vlan Access Control Configuring Radius Profiles Advanced Configuration AP-700 User Guide 35 Add Radius Server Profile 802.1x Authentication using Radius MAC Access Control Via Radius AuthenticationRadius Accounting Accounting Attributes Authentication Attributes101 102 Vlan Overview SSID/VLAN/Security103 104 Control Access to the AP Typical User Vlan ConfigurationsClick Configure SSID/VLAN/Security Mgmt Vlan Management Vlan Disable Vlan Tagging Provide Access to a Wireless Host in the Same WorkgroupSecurity Profile Authentication Process Advanced Configuration AP-700 User Guide SSID/VLAN/SecurityWi-Fi Protected Access WPA/802.11i WPA2 107 108 Authentication Protocol Hierarchy Click Configure SSID/VLAN/Security Security Profile Configuring Security ProfilesVLANs and Security Profiles 109 WEP Station Non Secure Station802.1x Station WPA Station 111 40 Security Profile Table Add Entries 112 Wireless MAC Access113 114 Configuring an SSID/VLAN with Vlan Tagging Disabled 115 43 SSID/VLAN Edit Entries Screen Vlan Tagging Disabled Click SSID/VLAN/Security Wireless Configuring SSID/VLANs with Vlan Tagging Enabled116 117 45 SSID/VLAN Edit Entries Screen Vlan Tagging Enabled 118 Broadcast Ssid and Closed System 119 Monitoring Monitoring AP-700 User Guide Version Icmp Monitoring Tab IP/ARP Table Learn Table Monitoring Tab Learn Table Radius 124 125 Monitoring AP-700 User Guide Interfaces 126 127 Station Statistics 128 Monitoring AP-700 User Guide Station Statistics Introduction to File Transfer via Tftp or Http Commands129 Tftp File Transfer Guidelines Image Error Checking During File TransferHttp File Transfer Guidelines 130 Update AP via Tftp Update APCommands AP-700 User Guide 131 Commands AP-700 User Guide Update AP via Http Update AP via Http132 Retrieve File Commands AP-700 User Guide Retrieve FileRetrieve File via Tftp 133 134 Retrieve File via Http Retrieve File via Http Command Screen Reset RebootCommands AP-700 User Guide Reboot Help Link 13 Help Link Configuration Screen 137 Troubleshooting Concepts TroubleshootingSymptoms and Solutions Connectivity Issues Basic Software Setup and Configuration Problems Client Connection Problems Active Ethernet AE Vlan Operation Issues Reset to Factory Default Procedure Recovery ProceduresForced Reload Procedure Download Procedure Download a New Image Using ScanToolPreparing to Download the AP Image 143 144 Download a New Image Using the Bootloader CLI Initializing the IP Address using CLI Setting IP Address using Serial PortHardware and Software Requirements Attaching the Serial Port Cable Related Applications Radius Authentication ServerTftp Server 146 147 Troubleshooting AP-700 User Guide Related Applications General Notes Command Line Interface CLIPrerequisite Skills and Knowledge Notation Conventions Navigation and Special Keys CLI Error Messages Bootloader CLI Command Line Interface CLI VariationsCommand Line Interface CLI AP-700 User Guide 150 Operational CLI Commands CLI Command TypesExample 1. Display Command list Example 3. Display parameters for set and show Example 2. Display specific CommandsExample 3a. Display every parameter that can be changed Example 4. Display Prompts for Successive Parameters Example 3b. Display parameters based on letter sequenceDone, exit, quit Download History HelpPasswd 154 Show CLI Command Parameter Control CommandsSearch 155 Configuring Objects that Require Reboot Set CLI CommandSet and show Command Examples Examples Example 4 Enable, Disable, or Delete a table entry or row Example 1 Set the Access Point IP Address ParameterExample 2 Create a table entry or row Example 3 Modify a table entry or row Example 6 Show Individual and Table Parameters Example 5 Show the Group Parameters158 Using Strings Using Tables and StringsWorking with Tables 159 Set Basic Configuration Parameters using CLI Commands Configuring the AP using CLI commandsLog into the AP using HyperTerminal Log into the AP using Telnet Set Network Names for the Wireless Interface Change PasswordsSet System Name, Location and Contact Information 161 162 Country Code 163 Configure SSIDs Network Names, VLANs, and Profiles Download an AP Configuration File from your Tftp Server Other Network SettingsBackup your AP Configuration File Set up Auto Configuration Configure the DNS Client Configure the AP as a Dhcp Server Enable/Disable Closed System Operational ModeAutochannel Select ACS Enable/Disable Super Mode 802.11a/g only Shutdown/Resume Wireless ServiceEnable/Disable Turbo Mode 802.11a/g only Configure Antenna Diversity Configure Management Ports Edit Management IP Access TableSet Communication Ports Set Telnet Session Timeouts Configure Secure Socket Layer HttpsConfigure Serial Port Interface 169 Enable/Disable WDS Create/Enable WDSSetup MAC Address Access Control Add an Entry to the MAC Access Control Table Figure A-17 Result of showradiustbl CLI Command 171 Disable Vlan Management Enable Vlan ManagementAdd a Entry to the Wifssid Table CLI Monitoring Parameters 174 Parameter Tables 175 Filtering Parameters Set sysresettodefaults Name Type Value Access CLI ParameterSystem Parameters 176 Dhcp Server Parameters Name Type Value Access CLI Parameter DNS Client for Radius Name ResolutionNetwork Parameters 177 Dhcp Relay Group Dhcp Server table for IP poolsDhcp Relay Server Table 178 Link Integrity IP Target Table Sntp Parameters Name Type Value Access CLI Parameter179 Interface Parameters Wireless Interface ParametersCommon Parameters to 802.11a/b/g 180 181 802.11a Only Parameters 802.11b/g Only Parameters 802.11b Only Parameters182 For 802.11b/g mode For 802.11g-only modeFor 802.11b-only Mode Wireless Interface SSID/VLAN/Profile Parameters Wireless Distribution System WDS ParametersChannel Blacklist Parameters 184 Snmp Parameters Name Type Value Access CLI Parameter Wireless Distribution System WDS Security Table ParametersManagement Parameters 185 186 Telnet Parameters Name Type Value Access CLI Parameter Http Parameters Name Type Value Access CLI Parameter187 Radius Based Management Access Parameters Serial Port Parameters Name Type Value Access CLI ParameterSSH Parameters 188 Tftp Server Parameters IP Access Table Parameters189 Ethernet Filtering Table Filtering Parameters190 TCP/UDP Port Filtering Proxy ARP Parameters Name Type Value Access CLI ParameterTCP/UDP Port Filtering Table 191 Name Type Value Access CLI Parameter Syslog Group 192 Alarms ParametersSnmp Table Host Table Parameters Syslog Parameters 193 Syslog Host Table Spanning Tree Priority and Path Cost Table Bridge Parameters194 Intra BSS Subscriber Blocking Storm Threshold TablePacket Forwarding Parameters 195 Radius Parameters Radius Server Configuration ParametersGeneral Radius Parameters 196 Security Parameters MAC Access Control Table Security Profile Table VLAN/SSID Parameters198 Enabling QoS Name Type Value Access CLI Parameter Iapp Parameters Name Type Value Access CLI ParameterConfiguring QoS Policies Other Parameters 200 Specifying the Mapping between 802.1p and 802.1D Priorities CLI Batch File Defining the QoS Policy used for a Wireless Interface Ssid201 Reboot Behavior Auto Configuration and the CLI Batch FileCLI Batch File Format and Syntax 203 CLI Batch File Error Log Hex Ascii Character ChartCharact Equival Ent 204 Software Features SpecificationsNumber of Stations per BSS Management Functions Specifications AP-700 User Guide Software Features Medium Access Control MAC FunctionsAdvanced Bridging Functions Security Functions Network Functions Specifications AP-700 User Guide207 Hardware Specifications Available Channels Mode Frequency Channel Product SKU Band802.11b/g 802.11a Upper 149 153 157 161 ISM Band 165 802.11a RF Performance 802.11a Data Rates Mbps RF Performance210 Online Support Technical SupportSoftware and Documentation Downloads Knowledgebase 211 Technical Support AP-700 User Guide Telephone Support Telephone SupportInternational 212 Warranty Coverage Statement of WarrantyRepair or Replacement Limitations of Warranty Other Information Ask a Question or Open an IssueSearch Knowledgebase Other Adapter Cards Product Model Numbers Regulatory Compliance215 Regulatory Compliance AP-700 User Guide Safety Information USA, Canada, & European Union216 217 Federal Communications Commission FCC 218 Modifications 219 Industry Canada IC 220 European Union Country Certification/Reference No Regulatory Compliance Certifications Summary221