Add Radius Server Profile | Proxim AP-700 guide

Advanced Configuration

AP-700 User Guide

Radius Profiles

Figure 4-35 Add RADIUS Server Profile

•Server Profile Name: the profile name. This is the name used to associated a VLAN to the profile. See Configuring Security Profiles. The Server Profile Name is also used in the Configure > Management > Services page to specify the RADIUS profile to be used for RADIUS Based Management Access.

•MAC Address Format Type: This parameter should correspond to the format in which the clients’ 12-digit MAC addresses are listed within the RADIUS server. Available options are:

—Dash delimited: dash between each pair of digits: xx-yy-zz-aa-bb-cc

—Colon delimited: colon between each pair of digits: xx:yy:zz:aa:bb:cc

—Single dash delimited: dash between the sixth and seventh digits: xxyyzz-aabbcc

—No delimiters: No characters or spaces between pairs of hexadecimal digits: xxyyzzaabbcc

•Accounting update interval: Enter the time interval (in minutes) for sending Accounting Update messages to the RADIUS server. A value of 0 (default) means that the AP will not send Accounting Update messages.

•Accounting inactivity timer: Enter the accounting inactivity timer. This parameter supports a value from 1-60 minutes. The default is 5 minutes.

•Authorization lifetime: Enter the time, in seconds, each client session may be active before being automatically re-authenticated. This parameter supports a value between 900 and 43200 seconds. The default is 0 (disabled).

•Server Addressing Format: select IP Address or Name. If you want to identify RADIUS servers by name, you must configure the AP as a DNS Client. See DNS Client for details.

•Server Name/IP Address: Enter the server’s name or IP address.

99

Image 99

Contents

ORiNOCO AP-700 Access Point User Guide AP-700 User Guide CopyrightTrademarks OpenSSL License Note Contents Management Contents AP-700 User Guide Commands TroubleshootingMonitoring General Notes Command Line Interface CLI Regulatory Compliance Ascii Character Chart C SpecificationsStatement of Warranty Technical Support AP-700 User Guide Introduction to Wireless Networking IntroductionDocument Conventions Ieee 802.11 Specifications Guidelines for RoamingIntroduction AP-700 User Guide Command Line Interface Management and Monitoring CapabilitiesHTTP/HTTPS Interface Snmp Management SSH Secure Shell ManagementSNMPv3 Secure Management Page Installation and Initialization AP-700 Hardware DescriptionOverview Installation and Initialization AP-700 User Guide AntennasExternal Antennas Active Ethernet LED Indicators Prerequisites Installation and Initialization AP-700 User Guide System Requirements Product Package Hardware Installation Required MaterialsCabling the AP-700 Installing the Security Cover Mounting the AP-700Mounting the AP-700 to a Ceiling AP-700 Mounting Plate Mounting the AP-700 to a Wall Installing External Antennas Opening the Antenna Compartment Installing the AP in a Plenum Using ScanTool InitializationScanTool Instructions Scan List Select Tools Internet Options Click LAN SettingsEnter Network Password screen appears Logging 11 System Status Screen Using the Setup Wizard 12 Setup Wizard Setup Wizard Instructions Installing the Software Click Commands Update AP via Http Install Software with Http Interface Install Software with Tftp Server Click Commands Reboot Related Topics Install Updates from your Tftp Server using the CLI System Status Screen System Status Advanced Configuration Configure Main Screen Advanced Configuration AP-700 User Guide Dynamic DNS Support SystemPage Network IP Configuration Dhcp Server DNS ClientAdvanced Advanced Configuration AP-700 User Guide Network Start IP Address End IP AddressComment optional Dhcp Relay Agent Dhcp Server IP Address Table Dhcp Relay Agent Target IP Address Comment optional Link Integrity Sntp Simple Network Time Protocol Link Integrity Configuration Screen Sntp Configuration Screen Advanced Configuration AP-700 User Guide Network Interfaces Operational Mode Ieee 802.11d Support for Additional Regulatory Domains Advanced Configuration AP-700 User Guide InterfacesSuper Mode and Turbo Mode Configuring 802.11d Support Configuring TX Power Control TX Power Control/Transmit Power Level 10 Wireless Interface Wireless 802.11a/b/g RadioPage Affected Countries Dynamic Frequency Selection/Radar Detection DFS/RD RTS/CTS Medium Reservation Wireless Service Status Channel Blacklist Table Traps Generated During Wireless Service Shutdown and ResumeClick on Configure Interfaces Wireless Set Blacklist Status to Enable Bridging WDS 13 WDS Example 14 WDS Configuration WDS Setup Procedure 15 Adding WDS Links Ethernet 16 Ethernet Sub-tab Management Passwords IP Access Table ServicesSecure Management Https Access Secure Socket Layer Advanced Configuration AP-700 User Guide ManagementSnmp Settings Http Access 17 Management Services Configuration Screen SSH Session Setup Configuring SSHSSH Clients Uploading Externally Generated Host Keys Click Commands Update AP via Http or via Tftp Radius Based Management Access Serial Configuration Settings Automatic Configuration AutoConfig Auto Configuration and the CLI Batch FileSet up Automatic Configuration for Static IP Set up Automatic Configuration for Dynamic IP 19 Automatic Configuration Screen 20 Dhcp Options Setting the Boot Server Host Name Hardware Configuration Reset Chrd Configuration Reset via Serial Port During Bootup Configuring Hardware Configuration ResetClick Configure Management Chrd Procedure to Reset Configuration via the Serial Interface Select the Filter Operation Type FilteringEthernet Protocol Static MAC Advanced Configuration AP-700 User Guide Filtering Wireless MAC Address 0020A6124E38 Wired MAC Address 0040F41CDB6AWireless MAC Address 00022D5194E4 Wired MAC Address Click Add under the TCP/UDP Port Filter Table heading AdvancedTCP/UDP Port Number Click Edit under the TCP/UDP Port Filter Table heading Editing TCP/UDP Port Filters Groups Alarms Operational Trap Group Trap Name Description Severity Level Security Trap Group Trap Name Description Severity Level Flash Memory Trap Group Trap Name Description Severity Level Trap Name Description Severity Level Sntp Trap Group Trap Name Description Severity Level Alarm Host TableTftp Trap Group Trap Name Description Severity Level Image Trap Group Trap Name Description Severity Level Advanced Configuration AP-700 User Guide Alarms Configuring Syslog Event Notifications SyslogEvent Priority Description Syslog Message Name Priority Severity Description Syslog Messages Advanced Configuration AP-700 User Guide 25 Preventing Rogue AP Attacks Rogue Scan Rogue Scan Data Collection Continuous Scanning ModeBackground Scanning Mode Multi-Band Scanning Rogue Scan Click Configure Alarms Rogue Scan 26 Rogue Scan Screen Spanning Tree Bridge Storm Threshold Advanced Configuration AP-700 User Guide Bridge Configuring Interfaces for Packet Forwarding Intra BSSPacket Forwarding Enabling QoS and Adding QoS policies Wireless Multimedia Extensions WME/Quality of Service QoSClick Configure QoS Policy QoS Enter the Priority Mapping Index Advanced Configuration AP-700 User Guide QoS Priority Mapping Click Configure QoS Priority Mapping STA Edca Table and AP Edca Table Enhanced Distributed Channel Access Edca 32 Edca Tables Advanced Configuration AP-700 User Guide QoS Radius Profiles Radius Servers per Authentication Mode and per Vlan Radius Servers Enforcing Vlan Access Control Configuring Radius Profiles Advanced Configuration AP-700 User Guide 35 Add Radius Server Profile MAC Access Control Via Radius Authentication 802.1x Authentication using RadiusRadius Accounting Authentication Attributes Accounting Attributes101 102 SSID/VLAN/Security Vlan Overview103 104 Management Vlan Typical User Vlan ConfigurationsControl Access to the AP Click Configure SSID/VLAN/Security Mgmt Vlan Provide Access to a Wireless Host in the Same Workgroup Disable Vlan TaggingSecurity Profile 107 Advanced Configuration AP-700 User Guide SSID/VLAN/SecurityAuthentication Process Wi-Fi Protected Access WPA/802.11i WPA2 108 Authentication Protocol Hierarchy 109 Configuring Security ProfilesClick Configure SSID/VLAN/Security Security Profile VLANs and Security Profiles WPA Station Non Secure StationWEP Station 802.1x Station 111 40 Security Profile Table Add Entries 112 MAC Access Wireless113 114 Configuring an SSID/VLAN with Vlan Tagging Disabled 115 43 SSID/VLAN Edit Entries Screen Vlan Tagging Disabled Configuring SSID/VLANs with Vlan Tagging Enabled Click SSID/VLAN/Security Wireless116 117 45 SSID/VLAN Edit Entries Screen Vlan Tagging Enabled 118 Broadcast Ssid and Closed System 119 Monitoring Monitoring AP-700 User Guide Version Icmp Monitoring Tab IP/ARP Table Learn Table Monitoring Tab Learn Table Radius 124 125 Monitoring AP-700 User Guide Interfaces 126 127 Station Statistics 128 Monitoring AP-700 User Guide Station Statistics Commands Introduction to File Transfer via Tftp or Http129 130 Image Error Checking During File TransferTftp File Transfer Guidelines Http File Transfer Guidelines 131 Update APUpdate AP via Tftp Commands AP-700 User Guide Update AP via Http Commands AP-700 User Guide Update AP via Http132 133 Commands AP-700 User Guide Retrieve FileRetrieve File Retrieve File via Tftp 134 Retrieve File via Http Retrieve File via Http Command Screen Reboot ResetCommands AP-700 User Guide Reboot Help Link 13 Help Link Configuration Screen 137 Connectivity Issues TroubleshootingTroubleshooting Concepts Symptoms and Solutions Basic Software Setup and Configuration Problems Client Connection Problems Active Ethernet AE Vlan Operation Issues Recovery Procedures Reset to Factory Default ProcedureForced Reload Procedure 143 Download a New Image Using ScanToolDownload Procedure Preparing to Download the AP Image 144 Download a New Image Using the Bootloader CLI Attaching the Serial Port Cable Setting IP Address using Serial PortInitializing the IP Address using CLI Hardware and Software Requirements 146 Radius Authentication ServerRelated Applications Tftp Server 147 Troubleshooting AP-700 User Guide Related Applications Notation Conventions Command Line Interface CLIGeneral Notes Prerequisite Skills and Knowledge Navigation and Special Keys CLI Error Messages 150 Command Line Interface CLI VariationsBootloader CLI Command Line Interface CLI AP-700 User Guide CLI Command Types Operational CLI CommandsExample 1. Display Command list Example 2. Display specific Commands Example 3. Display parameters for set and showExample 3a. Display every parameter that can be changed Download Example 3b. Display parameters based on letter sequenceExample 4. Display Prompts for Successive Parameters Done, exit, quit 154 HelpHistory Passwd 155 Parameter Control CommandsShow CLI Command Search Examples Set CLI CommandConfiguring Objects that Require Reboot Set and show Command Examples Example 3 Modify a table entry or row Example 1 Set the Access Point IP Address ParameterExample 4 Enable, Disable, or Delete a table entry or row Example 2 Create a table entry or row Example 5 Show the Group Parameters Example 6 Show Individual and Table Parameters158 159 Using Tables and StringsUsing Strings Working with Tables Log into the AP using Telnet Configuring the AP using CLI commandsSet Basic Configuration Parameters using CLI Commands Log into the AP using HyperTerminal 161 Change PasswordsSet Network Names for the Wireless Interface Set System Name, Location and Contact Information 162 Country Code 163 Configure SSIDs Network Names, VLANs, and Profiles Set up Auto Configuration Other Network SettingsDownload an AP Configuration File from your Tftp Server Backup your AP Configuration File Configure the DNS Client Configure the AP as a Dhcp Server Operational Mode Enable/Disable Closed SystemAutochannel Select ACS Configure Antenna Diversity Shutdown/Resume Wireless ServiceEnable/Disable Super Mode 802.11a/g only Enable/Disable Turbo Mode 802.11a/g only Edit Management IP Access Table Configure Management PortsSet Communication Ports 169 Configure Secure Socket Layer HttpsSet Telnet Session Timeouts Configure Serial Port Interface Add an Entry to the MAC Access Control Table Create/Enable WDSEnable/Disable WDS Setup MAC Address Access Control Figure A-17 Result of showradiustbl CLI Command 171 Enable Vlan Management Disable Vlan ManagementAdd a Entry to the Wifssid Table CLI Monitoring Parameters 174 Parameter Tables 175 Filtering Parameters 176 Name Type Value Access CLI ParameterSet sysresettodefaults System Parameters 177 DNS Client for Radius Name ResolutionDhcp Server Parameters Name Type Value Access CLI Parameter Network Parameters 178 Dhcp Server table for IP poolsDhcp Relay Group Dhcp Relay Server Table Sntp Parameters Name Type Value Access CLI Parameter Link Integrity IP Target Table179 180 Wireless Interface ParametersInterface Parameters Common Parameters to 802.11a/b/g 181 802.11a Only Parameters 802.11b Only Parameters 802.11b/g Only Parameters182 Mode For 802.11g-only modeFor 802.11b/g mode For 802.11b-only 184 Wireless Distribution System WDS ParametersWireless Interface SSID/VLAN/Profile Parameters Channel Blacklist Parameters 185 Wireless Distribution System WDS Security Table ParametersSnmp Parameters Name Type Value Access CLI Parameter Management Parameters 186 Http Parameters Name Type Value Access CLI Parameter Telnet Parameters Name Type Value Access CLI Parameter187 188 Serial Port Parameters Name Type Value Access CLI ParameterRadius Based Management Access Parameters SSH Parameters IP Access Table Parameters Tftp Server Parameters189 Filtering Parameters Ethernet Filtering Table190 191 Proxy ARP Parameters Name Type Value Access CLI ParameterTCP/UDP Port Filtering TCP/UDP Port Filtering Table Syslog Parameters Alarms ParametersName Type Value Access CLI Parameter Syslog Group 192 Snmp Table Host Table Parameters 193 Syslog Host Table Bridge Parameters Spanning Tree Priority and Path Cost Table194 195 Storm Threshold TableIntra BSS Subscriber Blocking Packet Forwarding Parameters 196 Radius Server Configuration ParametersRadius Parameters General Radius Parameters Security Parameters MAC Access Control Table VLAN/SSID Parameters Security Profile Table198 Other Parameters Iapp Parameters Name Type Value Access CLI ParameterEnabling QoS Name Type Value Access CLI Parameter Configuring QoS Policies 200 Specifying the Mapping between 802.1p and 802.1D Priorities Defining the QoS Policy used for a Wireless Interface Ssid CLI Batch File201 Auto Configuration and the CLI Batch File Reboot BehaviorCLI Batch File Format and Syntax 203 CLI Batch File Error Log Ascii Character Chart HexCharact Equival Ent 204 Management Functions SpecificationsSoftware Features Number of Stations per BSS Security Functions Medium Access Control MAC FunctionsSpecifications AP-700 User Guide Software Features Advanced Bridging Functions Specifications AP-700 User Guide Network Functions207 Hardware Specifications Upper 149 153 157 161 ISM Band 165 Mode Frequency Channel Product SKU BandAvailable Channels 802.11b/g 802.11a RF Performance 802.11a RF Performance 802.11a Data Rates Mbps210 Technical Support Online SupportSoftware and Documentation Downloads Knowledgebase 211 Telephone Support Technical Support AP-700 User Guide Telephone SupportInternational 212 Limitations of Warranty Statement of WarrantyWarranty Coverage Repair or Replacement Other Adapter Cards Ask a Question or Open an IssueOther Information Search Knowledgebase Regulatory Compliance Product Model Numbers215 Safety Information USA, Canada, & European Union Regulatory Compliance AP-700 User Guide216 217 Federal Communications Commission FCC 218 Modifications 219 Industry Canada IC 220 European Union Regulatory Compliance Certifications Summary Country Certification/Reference No221