Extreme Networks WM20 Controller Guía de usuario Pagina 108

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 270
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 107
WM Access Domain Services Configuration
Summit WM20 User Guide, Software Release 4.2108
Authentication for a WM-AD
The next step in configuring a WM-AD is to set up the authentication mechanism. There are various
authentication combinations available:
If network assignment is by SSID, authentication can be:
none
by Captive Portal using internal Captive Portal
by Captive Portal using external Captive Portal
by MAC-based authentication
If network assignment is by AAA (802.1x), authentication can be:
by 802.1x authentication, the wireless device user must be authenticated before gaining network
access
by MAC-based authentication
The first step for any type of authentication is to select RADIUS servers for:
Authentication
Accounting
MAC-based authentication
MAC-based authentication enables network access to be restricted to specific devices by MAC address.
In addition to the other types of authentication, when MAC-based authentication is employed the
Summit WM Controller queries a RADIUS server to determine if the wireless client's MAC address is
authorized to access the network.
Vendor-Specific Attributes
In addition to the standard RADIUS message, you can include Vendor-Specific Attributes (VSAs). The
Summit WM Controller, Access Points and Software authentication mechanism provides six VSAs for
RADIUS and other authentication mechanisms.
Table 4: Vendor-Specific Attributes
Attribute Name ID Type Messages Description
Extreme-URL-Redirection 1 string Returned from
RADIUS server
A URL that can be returned to redirect a
session to a specific Web page.
Extreme-AP-Name 2 string Sent to RADIUS
server
The name of the AP the client is
associating to. It can be used to assign
policy based on AP name or location.
Extreme-AP-Serial 3 string Sent to RADIUS
server
The AP serial number. It can be used
instead of (or in addition to) the AP name.
Extreme-WM-AD-Name 4 string Sent to RADIUS
server
The name of the WM-AD the client has
been assigned to. It is used in assigning
policy and billing options, based on service
selection.
Extreme-SSID 5 string Sent to RADIUS
server
The name of the SSID the client is
associating to. It is used in assigning
policy and billing options, based on service
selection.
Vista de pagina 107
1 2 ... 103 104 105 106 107 108 109 110 111 112 113 ... 269 270

Comentarios a estos manuales

Sin comentarios