D-Link DWS-3024L User Manual - Page 85

5 Configuring Access Point Settings switch or externally on a RADIUS server. When an AP is discovered, the switch verifies the AP's MAC address according to the validation mode (local or RADIUS) as long as the AP is enabled for Managed Mode and has been authentication (if required). Once the AP is verified, it becomes managed by the switch. If an AP is discovered and its MAC address is not found in the Valid AP database or the AP fails to authenticate, the switch adds an entry to the AP failure list. If you use the local Valid AP database, you can add the failed AP to the Valid AP database directly from the AP Authentication Failures page. The Valid AP database stores additional information about the AP along with its MAC address such as the AP mode, local authentication password, and the AP profile that the access point uses. You can also manually set the channel and RF signal transmit power level for an individual AP, which overrides the channel and power settings in the AP profile. Configuring AAA and RADIUS Settings In the D-Link Unified Access System, you can use a RADIUS server for the following functions: • Management of client-to-AP authentication and accounting • Management of AP-to-Switch authentication and accounting • Database for AP settings The information in this section applies to the client-to-AP authentication and accounting management. For information about AP-to-switch management, see "Using the RADIUS Database for AP Validation" on page 78. For information about how to set AP database settings in the RADIUS server, see Appendix B, "Configuring the External RADIUS Server" on page 205. The RADIUS server that you configure from the Administration > Basic Setup > AAA/RADIUS tab is the RADIUS server for the default AP profile. For each network, you can configure a unique RADIUS server or use the default RADIUS server. When you use a RADIUS server for wireless client-to-AP communications, such as when clients use WPA Enterprise or WEP IEEE 802.1X security to connect to the AP, the AP is the RADIUS client and communicates with the RADIUS server. The Unified Switch does not tunnel packets between the AP and RADIUS server. This means that you must configure the AP as a client in the RAIDUS server. For information about how configure RADIUS clients, see Appendix B. Table 7 describes the fields you can configure for the default AP profile RADIUS server. Table 7. Global RADIUS Server Field Description IP Address This is the IP address of the RADIUS server the AP uses for authentication. Configuring AAA and RADIUS Settings 85