Nitek MNG6448 - Manual (Page 12)

12
RADIUS (Remote Authentication Dial-In User Service) plays a central role in the network in providing the capabili-
ties of authenticating, authorizing, accounting, auditing and alarming…etc and allows an organization to maintain
user profiles in a central database that all remote servers can share. Since RADIUS is relatively complex to ex-
plain, we will focus here on how it acts as an 802.1x authentication server (EAP-aware RADIUS) and assists in
enhancing security in Access Point mode.
RADIUS performs the authentication function required to check the credentials of users and intermediate Mesh
Units and indicates whether the users are authorized to access the Mesh Units. Enabling RADIUS is therefore the
first step toward building up an 802.1x-capable environment. It is also a must-do to accommodate the recently in-
troduced Wi-Fi protected access (WPA-EAP) to wireless networks.
Authentication/Access Control RADIUS Server Configuration: This configuration is required for authentication
using RADIUS. IP Address, Port No. and Shared Secret is required for communication with RADIUS Server. A
Secondary RADIUS Server can be configured which is used on failure on Primary RADIUS Server.
IP Address: IP address of the RADIUS Server. Default is 0.0.0.0
Port Number: Port number of the RADIUS Server. Default is 1812.
Shared Secret: This is shared between the Wireless Access Point and the RADIUS Server for authenticating the
supplicant.
Reauthentication Time: The time interval in seconds after which the supplicant will be authenticated again with
the RADIUS Server.
Global-Key Update: A check in this option will enable Re-keying of Global Key. The Global Key Re-Key can be
done based on time interval in seconds or number of packets exchanged using the global key.
Update if any station disassociates: A check in this option will refresh global key when any stations disassoci-
ated with wireless Mesh Unit.
Radius Settings
Figure 8 Radius Settings