D-Link DBS-2000-10 Nuclias Manual - Page 53

Using WPA, WPA+WPA2 With 802.1X, Enterprise RADIUS Authentication

Page 53 highlights

Using WPA, WPA+WPA2 With 802.1X Enterprise (RADIUS) Authentication 1. Navigate to the Configure > Access Point > Profiles page. 2. From the Profile list, click SSID under the Actions column of the Profile of the SSID you wish to edit. 3. From the SSID list, click the SSID name of the SSID you wish to edit. 4. In the SSID configuration window, click the Basic tab. 5. From the Security drop-down menu, select WPA or WPA+WPA2. 6. From the Auth Method drop-down menu, select RADIUS. 7. [Optional] If you have no preconfigured RADIUS servers, click Add a RADIUS server and specify the following information: Host Port Secret Enter the IP address of the RADIUS server. Enter a port for the RADIUS server. The range is between 1 and 65535. Enter a shared secret. 8. Select a primary RADIUS server database from the drop-down menu. 9. [Optional] Select a secondary RADIUS server database from the drop-down menu. 10. Specify the following information: Encryption Select an encryption method. Group key update Set the interval (in seconds) at which the group key is interval updated for the SSID. The default is 3600 seconds. 11. Choose to enable or disable SSID broadcasting. Note: If SSID broadcasting is disabled, users will not see the SSID on their device. 12. Check the wireless bands to enable. If both bands are enabled, choose to enable or disable band steering which automatically connects compatible clients to the 5 GHz band. 13. Choose to enable or disable guest access mode. Note: Enabling guest access will make this SSID an isolated guest network and will automatically enable NAT mode and station isolation. This prevents external clients from connecting to the internal network. 14. Choose to enable or disable Network Address Translation (NAT mode). Note: This is enabled by default if guest access mode is enabled. 45

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115

45
Using WPA, WPA+WPA2 With 802.1X
Enterprise (RADIUS) Authentication
1. Navigate to the
Configure > Access Point > Profiles
page.
2.
From the Profile list, click
SSID
under the Actions column of the Profile of the SSID you
wish to edit.
3.
From the SSID list, click the SSID name of the SSID you wish to edit.
4.
In the SSID configuration window, click the
Basic
tab.
5.
From the Security drop-down menu, select
WPA
or
WPA+WPA2
.
6.
From the Auth Method drop-down menu, select
RADIUS
.
7. [
Optional
] If you have no preconfigured RADIUS servers, click
Add a RADIUS server
and specify the following information:
Host
Enter the IP address of the RADIUS server.
Port
Enter a port for the RADIUS server. The range is
between
1
and
65535
.
Secret
Enter a shared secret.
8.
Select a primary RADIUS server database from the drop-down menu.
9. [
Optional
] Select a secondary RADIUS server database from the drop-down menu.
10. Specify the following information:
Encryption
Select an encryption method.
Group key update
interval
Set the interval (in seconds) at which the group key is
updated for the SSID. The default is
3600
seconds.
11. Choose to enable or disable SSID broadcasting.
Note
: If SSID broadcasting is disabled, users will not see the SSID on their device.
12. Check the wireless bands to enable. If both bands are enabled, choose to enable or
disable band steering which automatically connects compatible clients to the 5 GHz
band.
13. Choose to enable or disable guest access mode.
Note
: Enabling guest access will make this SSID an isolated guest network and will
automatically enable NAT mode and station isolation. This prevents external clients
from connecting to the internal network.
14. Choose to enable or disable Network Address Translation (NAT mode).
Note
: This is enabled by default if guest access mode is enabled.