Manuals / SMC Networks / Computer Equipment / Network Router

SMC Networks SMC2555W-AG manual Radius

Models: SMC2555W-AG

1 260

Download 260 pages 41.03 Kb

Page 68

System Configuration

Radius

Remote Authentication Dial-in User Service (RADIUS) is an authentication protocol that uses software running on a central server to control access to RADIUS-aware devices on the network. An authentication server contains a database of user credentials for each user that requires access to the network.

A primary RADIUS server must be specified for the SMC2555W-AG to implement IEEE 802.1x network access control and Wi-Fi Protected Access (WPA) wireless security. A secondary RADIUS server may also be specified as a backup should the primary server fail or become inaccessible.

Note: This guide assumes that you have already configured RADIUS server(s) to support the access point. If using WPA Pre-Shared Key mode then no RADIUS configuration is necessary.

Configuration of RADIUS server software is beyond the scope of this guide, refer to the documentation provided with the RADIUS server software.

5-10

Image 68

SMC Networks SMC2555W-AG manual Radius

Contents

SMC2555W-AG Page Revision Number R02, F3.0.02 Copyright TrademarksLimited Warranty Limited Warranty FCC Radiation Exposure Statement Wireless 2.4 Ghz and 5 GHz Band StatementsFederal Communication Commission Interference Statement Industry Canada Class B Japan Vcci Class B Australia/New Zealand AS/NZSEC Conformance Declaration Compliances Operation Using 5 GHz Channels in the European Community Declaration of Conformity in Languages of the EuropeanViii CommunitySafety Compliance Power Cord SafetyCord set must be UL-approved and CSA certified France et Pérou uniquement Xii Xiii Xiv Table of Contents Command Line Interface XviXvii Xviii Glossary Index Table of Contents Chapter Introduction Package Checklist IntroductionHardware Description Hardware DescriptionFront Panel Rear PanelAntennas LED IndicatorsComponent Description Security Slot Ethernet Port Reset ButtonConsole Port Power Connector Features and BenefitsFeatures and Benefits Applications Frequently changing environmentsSystem Defaults System DefaultsMAC System Defaults Iapp 802.11b/g Introduction Hardware Installation Hardware Installation Attaching the Mounting BracketHardware Installation Hardware Installation Network Configuration Network Topologies Network ConfigurationAd Hoc Wireless LAN no AP or Bridge Infrastructure Wireless LAN Network TopologiesInfrastructure Wireless LAN for Roaming Wireless PCs Seamless Roaming Network Configuration Initial Setup through the CLI Required ConnectionsInitial Configuration Initial Setup through the CLI Initial Configuration StepsUsing the Web-based Management Setup Wizard Using the Web-based Management Setup Wizard Initial Configuration Using the Web-based Management Setup Wizard 802.11g Radio Channel Set the operating radio Using the Web-based Management Setup Wizard Initial Configuration System Configuration Advanced Configuration System ConfigurationAdvanced Configuration System Identification Disabled TCP / IP Settings Advanced Configuration System Configuration SMC-APconfig#interface ethernet Radius Advanced Configuration Authentication fails. Range 1-30 Default SMC-APconfig#radius-server address Authentication Advanced Configuration System Configuration Advanced Configuration Local Allowed Secs Filter Control Number Radius Attribute Value Advanced Configuration Native Vlan AP Management Snmp Advanced Configuration SMC-APconfig#snmp-server host 10.1.19.23 alpha Administration Changing the PasswordSMC-APconfig#username bob SMC-APconfig#password smcadmin Upgrading Firmware System Configuration Advanced Configuration File Size System Log Enabling System LoggingError Level Description Configuring Sntp System Configuration Show sntp command TAIPEI, BeijingRadio Interface Radio Settings 802.11a Radio InterfaceNormal Mode Turbo Mode Radio Interface Enter Wireless configuration commands, one per line Enabled Radio Settings 802.11g Radio Interface SMC-APif-wireless g#select-antenna-mode right antenna Ssid Security WEP Wired Equivalent Privacy WEP Radio Interface WEP only WEP over Show interface wireless g command PRE Shared KEY Wi-Fi Protected Access WPA System Configuration Radio Interface System Configuration WPA pre-shared key only WPA over Show interface wireless a or show interface wireless g Command not shown in exampleStatus Information Access Point StatusStatus Information System Configuration Days, 4 hours, 39 minutes Station Status True Event Logs 192.168.1.19 System Configuration Console Connection Using the Command Line InterfaceAccessing the CLI Command Line Interface Telnet ConnectionKeywords and Arguments Entering CommandsEntering Commands Command Completion Getting Help on CommandsShowing Commands Minimum AbbreviationPartial Keyword Lookup Understanding Command Modes Negating the Effect of CommandsUsing Command History Exec Commands Configuration CommandsCommand Line Processing Keystroke FunctionEntering Commands Command Groups Command Description GroupConfigure General CommandsGeneral Commands End ExitSyntax Command UsagePing Show history ResetSyntax Reset board configuration Console port settings are fixed at the values shown below Show lineSystem Management Commands Command Function ModeSystem Management Commands System ClockCountry Country countrycodeSMC-AP#country ie Prompt System nameSyntax Prompt string no prompt Syntax System name name no system nameUsername Syntax Username namePassword Syntax Password password no passwordIp http port Syntax Ip http port port-numberno ip http portSyntax Ip http server no ip http server Default Setting Ip http serverLogging host Syntax Logging on no logging on Default SettingLogging on Syntax Logging console no logging console Default Setting Logging consoleLogging level Level Argument DescriptionDefault Setting Command Mode Syntax Show logging Command ModeLogging facility-type Show loggingSntp-server ip Syntax Sntp-server ip 1 2 ipSntp-server enable Sntp-server date-time This example sets the system clock to 1737 June 19Sntp-server daylight-saving Syntax Sntp-server timezone hours Sntp-server timezoneShow sntp Show system Show version Snmp-server community Snmp CommandsSnmp Commands Snmp-server contact Syntax Snmp-server contact string no snmp-server contactSnmp-server enable server Snmp-server host No snmp-server hostSnmp-server location Syntax Snmp-server location text no snmp-server locationFlash/File Commands Show snmpSyntax Bootfile filename Flash/File CommandsBootfile Syntax Copy ftp tftp file copy config ftp tftp CopyDelete Dir File information is shown belowRadius Client Radius ClientSyntax Radius-server secondary port portnumber Radius-server addressRadius-server port Radius-server key Radius-server retransmitSyntax Radius-server secondary key keystring Syntax Radius-server secondary retransmit numberofretriesRadius-server timeout Syntax Radius-server secondary timeout numberofsecondsShow radius 802.1x Port Authentication Syntax 802.1x supported required no 802.1x Port Authentication802.1x 802.1x broadcast-key-refresh-rate Syntax 802.1x broadcast-key-refresh-rate rate802.1x session-key-refresh-rate Syntax 802.1x session-key-refresh-rate rate802.1x session-timeout Address filter defaultDefault Syntax Address filter default allowed deniedAddress filter entry Syntax Address filter entry mac-addressallowed deniedAddress filter delete Syntax Address filter delete mac-addressMac-authentication server Syntax Mac-authentication server local remoteMac-authentication session-timeout Syntax Mac-authentication session-timeout secondsShow authentication Filter local-bridge Filtering CommandsSyntax Filter local-bridge no filter local-bridge Default Filter ap-manage Filtering CommandsSyntax Filter ap-manage no filter ap-manage Default Filter ethernet-type enable Filter ethernet-type protocol Interface Commands Show filtersInterface Commands IC-W Transmit-power Dns server Syntax Interface ethernet wireless a gInterface Ip address This example specifies two domain-name serversIP address Netmask Syntax Ip dhcp no ip dhcp Default Setting Ip dhcpSyntax Shutdown no shutdown Default Setting ShutdownShow interface ethernet Syntax Show interface ethernetRadio-mode Syntax Radio-mode b g b+gSelect-antenna-mode Syntax Select-antenna-mode diversity right antennaSyntax Ssid-broadcast no ssid-broadcast Default Setting DescriptionSsid-broadcast Syntax Description string no descriptionSpeed Syntax Speed speedChannel Syntax Channel channel autoTurbo Syntax Beacon-interval interval SsidBeacon-interval Dtim-period Syntax Dtim-period intervalSyntax Fragmentation-length length Default Setting 2346 Command ModeFragmentation-length Rts-threshold Syntax Rts-threshold thresholdSyntax Authentication open shared Encryption Key Key index size type value no key indexTransmit-key Syntax Transmit-key indexTransmit-power Transmit-powersignal-strengthMax-association Syntax Max-association countMulticast-cipher Syntax Multicast-cipher AES Tkip WEPWpa-clients Syntax Wpa-clients required supportedEnhanced Data Encryption through Tkip Wpa-mode Syntax Wpa-mode dynamic pre-shared-keyWpa-preshared-key Syntax Wpa-preshared-key type valueWpa-psk-type Syntax Wpa-psk-type typeShow interface wireless Syntax Show interface wireless a gSsid SMC Show station Iapp Iapp CommandsSyntax Iapp no iapp Default Vlan Commands Vlan CommandsVlan Syntax Vlan enable no vlan DefaultCommand Description Native-vlanid Syntax Native-vlanid vlan-id102 Appendix a Troubleshooting Troubleshooting Troubleshooting Maximum Distance Table Important NoticeAppendix B Cables and Pinouts Twisted-Pair Cable AssignmentsCables and Pinouts 10/100BASE-TX Pin AssignmentsTwisted-Pair Cable Assignments Straight-Through WiringCrossover Wiring Wiring Map for Serial Cable Console Port Pin AssignmentsConsole Port Pin Assignments Serial Cable Signal Directions for DB-9 PortsSerial Cable Signal Directions for DB-25 Ports Cables and Pinouts General Specifications Specifications General Specifications Sensitivity Ieee 802.11a Sensitivity GHz dBm Modulation/RatesTransmit Power Specifications Access Point AuthenticationAd Hoc Advanced Encryption Standard AESGlossary Extended Service Set ESS Extensible Authentication Protocol EAPEthernet File Transfer Protocol FTPInter Access Point Protocol Iapp Ieee 802.11bIeee 802.11g IeeePower over Ethernet PoE Network Time Protocol NTPOpen System Orthogonal Frequency Division Multiplexing OdfmService Set Identifier Ssid Session KeyShared Key Simple Network Management Protocol SnmpWi-Fi Protected Access Trivial File Transfer Protocol TftpVirtual LAN Vlan WPA Pre-shared Key PSKGlossary-8 Index Index Index-3 Index-4 Page For Technical SUPPORT, Call