3 external authentication server, External authentication server, In section – Fortress Technologies ecure Wireless Access Bridge User Manual

Page 53: 3, to

Advertising
background image

Fortress Bridge: Configuration

43

The default

Auth Server Key

is

fortress

, which you can

optionally change.

Selecting

Local

authentication enables the screens and fields

that configure local authentication settings for both users and
devices.

NOTE:

The Bridge

has not been test-

ed with, and may not
fully support, other
common RADIUS serv-
ers. Contact your For-
tress representative for
more detail about third-
party RADIUS support.

3.6.6.3

External Authentication Server
The Bridge can be integrated with an external Remote
Authentication Dial-In User Service (RADIUS). It supports the
open source freeRADIUS.

Also, in a point-to-point or point-to-multipoint Bridge
deployment that uses the RADIUS server internal to the root
Bridge for authentication, only the root Bridge is configured for

Local

authentication, while the other Bridge(s) in the network

are configured to use the root Bridge’s RADIUS server as an

External

authentication server.

The screens and fields that configure local authentication
settings for users and devices are disabled when

External

authentication is selected. (These settings are configured on
the external authentication server.)

NOTE:

If you are

using both RADI-

US and 802.1X authenti-
cation services, they can
run on the same exter-
nal server, but you must
enter the server’s set-
tings both on the

SECURI

-

TY

SETTINGS

screen (in

the

AUTHENTICATION

SET

-

TINGS

section) and on the

INTERFACES

screen (in the

802.1X

AUTHENTICATION

SERVER

frame).

To use the Bridge with an external RADIUS server, the Bridge
must be added as a RADIUS Network Access Server (NAS)
client and assigned a shared key for communication with
RADIUS. Please refer to your RADIUS documentation for
guidance.

To configure an external RADIUS server:

NOTE:

The server

key you enter here

should already be
present in the RADIUS
service configuration.

1

Log on to the Bridge GUI

admin

account and select

SECURITY

SETTINGS

from the menu on the left.

2

In the

AUTHENTICATION

SETTINGS

frame:

™

Ensure that

Auth Mode

is

External

.

™

In

Auth Server Address

, enter the IP address of your

external RADIUS server.

™

In

Auth Server Key,

enter the shared key assigned to the

Bridge in RADIUS.

™

In

Confirm Server Key,

re-enter the shared key (to guard

against entry errors).

3

Click

Apply

at the bottom of the screen.

detail:

Advertising