D-Link DWL-8600AP Administration Guide - Page 53

Table 17, IEEE 802.1X, Field, Description

Page 53 highlights

Software User Manual 12/10/09 D-Link UAP You can use any of a variety of authentication methods that the IEEE 802.1X mode supports, including certificates, Kerberos, and public key authentication. You must configure the client stations to use the same authentication method the AP uses. Table 17: IEEE 802.1X Field Description Use Global RADIUS Server Settings By default each VAP uses the global RADIUS settings that you define for the AP at the top of the VAP page. However, you can configure each VAP to use a different set of RADIUS servers. To use the global RADIUS server settings, make sure the check box is selected. To use a separate RADIUS server for the VAP, clear the check box and enter the RADIUS server IP address and key in the following fields. RADIUS IP Address Type Specify the IP version that the RADIUS server uses. You can toggle between the address types to configure IPv4 and IPv6 global RADIUS address settings, but the AP contacts only the RADIUS server or servers for the address type you select in this field. RADIUS IP Address RADIUS IPv6 Address Enter the IPv4 or IPv6 address for the primary RADIUS server for this VAP. If the IPv4 RADIUS IP Address Type option is selected in the previous field, enter the IP address of the RADIUS server that all VAPs use by default, for example 192.168.10.23. If the IPv6 RADIUS IP Address Type option is selected, enter the IPv6 address of the primary global RADIUS server, for example 2001:0db8:1234::abcd. RADIUS IP or IPv6 Address 1-3 Enter up to three IPv4 and/or IPv6 addresses to use as the backup RADIUS servers for this VAP.The field label is RADIUS IP Address when the IPv4 RADIUS IP Address Type option is selected and RADIUS IPv6 Address when the IPv6 RADIUS IP Address Type option is selected. If authentication fails with the primary server, each configured backup server is tried in sequence. RADIUS Key Enter the RADIUS key in the text box. The RADIUS Key is the shared secret key for the global RADIUS server. You can use up to 63 standard alphanumeric and special characters. The key is case sensitive, and you must configure the same key on the AP and on your RADIUS server. The text you enter will be displayed as "*" characters to prevent others from seeing the RADIUS key as you type. RADIUS Key 1-3 Enter the RADIUS key associated with the configured backup RADIUS servers. The server at RADIUS IP Address-1 uses RADIUS Key-1, RADIUS IP Address-2 uses RADIUS Key-2, and so on. Enable RADIUS Accounting Select this option to track and measure the resources a particular user has consumed such as system time, amount of data transmitted and received, and so on. If you enable RADIUS accounting, it is enabled for the primary RADIUS server and all backup servers. Broadcast Key Refresh Rate Enter a value to set the interval at which the broadcast (group) key is refreshed for clients associated to this VAP. The valid range is 0-86400 seconds. A value of 0 indicates that the broadcast key is not refreshed. Session Key Refresh Enter a value to set the interval at which the AP will refresh session (unicast) keys for each client Rate associated to the VAP. The valid range is 0-86400 seconds. A value of 0 indicates that the broadcast key is not refreshed. Note: After you configure the security settings, you must click Apply to apply the changes and to save the settings. 34CSFP6XXUAP-SWUM100-D13 Virtual Access Point Settings Page 53

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135

Software User Manual
D-Link UAP
12/10/09
34CSFP6XXUAP-SWUM100-D13
Virtual Access Point Settings
Page
53
You can use any of a variety of authentication methods that the IEEE 802.1X mode supports, including certificates, Kerberos,
and public key authentication. You must configure the client stations to use the same authentication method the AP uses.
Table 17:
IEEE 802.1X
Field
Description
Use Global RADIUS
Server Settings
By default each VAP uses the global RADIUS settings that you define for the AP at the top of the
VAP page. However, you can configure each VAP to use a different set of RADIUS servers.
To use the global RADIUS server settings, make sure the check box is selected.
To use a separate RADIUS server for the VAP, clear the check box and enter the RADIUS server IP
address and key in the following fields.
RADIUS IP Address
Type
Specify the IP version that the RADIUS server uses.
You can toggle between the address types to configure IPv4 and IPv6 global RADIUS address
settings, but the AP contacts only the RADIUS server or servers for the address type you select in
this field.
RADIUS IP Address
RADIUS IPv6
Address
Enter the IPv4 or IPv6 address for the primary RADIUS server for this VAP.
If the IPv4 RADIUS IP Address Type option is selected in the previous field, enter the IP address of
the RADIUS server that all VAPs use by default, for example 192.168.10.23. If the IPv6 RADIUS IP
Address Type option is selected, enter the IPv6 address of the primary global RADIUS server, for
example 2001:0db8:1234::abcd.
RADIUS IP or IPv6
Address 1–3
Enter up to three IPv4 and/or IPv6 addresses to use as the backup RADIUS servers for this VAP.The
field label is RADIUS IP Address when the IPv4 RADIUS IP Address Type option is selected and
RADIUS IPv6 Address when the IPv6 RADIUS IP Address Type option is selected.
If authentication fails with the primary server, each configured backup server is tried in sequence.
RADIUS Key
Enter the RADIUS key in the text box.
The
RADIUS Key
is the shared secret key for the global RADIUS server. You can use up to 63
standard alphanumeric and special characters. The key is case sensitive, and you must configure
the same key on the AP and on your RADIUS server. The text you enter will be displayed as "*"
characters to prevent others from seeing the RADIUS key as you type.
RADIUS Key 1–3
Enter the RADIUS key associated with the configured backup RADIUS servers. The server at
RADIUS IP Address-1 uses RADIUS Key-1, RADIUS IP Address-2 uses RADIUS Key-2, and so on.
Enable RADIUS
Accounting
Select this option to track and measure the resources a particular user has consumed such as
system time, amount of data transmitted and received, and so on.
If you enable RADIUS accounting, it is enabled for the primary RADIUS server and all backup
servers.
Broadcast Key
Refresh Rate
Enter a value to set the interval at which the broadcast (group) key is refreshed for clients associated
to this VAP.
The valid range is 0–86400 seconds. A value of 0 indicates that the broadcast key is not refreshed.
Session Key Refresh
Rate
Enter a value to set the interval at which the AP will refresh session (unicast) keys for each client
associated to the VAP.
The valid range is 0–86400 seconds. A value of 0 indicates that the broadcast key is not refreshed.
Note:
After you configure the security settings, you must click
Apply
to apply the changes and to save the settings.