Article ID:1032
Objective
Remote Authentication Dial In User Service (RADIUS) is an authentication mechanism for the devices to connect and use a network service. A RADIUS server is a mechanism to regulate access to a computer network by users. For example, a public wireless (WiFi) network is installed on a university campus. Not anyone can use these networks, only those students to whom the university has given a password. The RADIUS server checks the passwords entered by the users and grants or denies access as appropriate.
This article explains the procedure to configure a RADIUS Server on WAP4410N access points.
Applicable Devices
• WAP4410N Wireless-N Access Point
Software Version
• 2.0.5.3
Configuration of RADIUS Server
Step 1. Log in to the web configuration utility and choose Wireless > Connection Control. The Wireless Connection Control page opens:
Step 2. Choose the desired SSID for the RADIUS server from the Select SSID drop-down list.
Step 3. Click the RADIUS radio button to enable the RADIUS server.
Step 4. Enter the IP address of the RADIUS server in the Primary RADIUS Server field. This IP address is required to communicate with the server.
Step 5. Enter the number of the port that you want to use to communicate with the RADIUS server in the RADIUS Server Port field. RADIUS messages are sent with the use of UDP, so the UDP port 1812 is used by default for RADIUS authentication messages. User defined port numbers can also be given but it should fall under the range 1025 to 65536.
Caution: In order for users to be authenticated regardless of their location, it is suggested that the port number should remain the default of 1812.
Step 6. Enter the shared secret key in the Primary Shared Secret field. The range is 1 to 64 characters. Shared secrets are used to verify that RADIUS messages, with the exception of the access request message, are sent by a RADIUS enabled device that is configured with the same secret key.
Step 7. (Optional) Enter the IP address of the backup RADIUS server in the Backup RADIUS Server field. The backup RADIUS server is used only if the primary server is unavailable.
Step 8. (Optional) Enter the port number that you want to use to communicate with the backup server in the Backup RADIUS Server Port field.
Caution: This can be different than the primary RADIUS server port, but it is highly suggested that they are the same.
Step 9. (Optional) Enter the shared secret key in the Backup Shared Secret field. The range is 1 to 64 characters. The value should not be same as the primary shared secret key.
Step 10. Click Save to save the all changes made on the RADIUS server.
