Dell W-Series 277 Instant 6.5.1.0-4.3.1.0 User Guide - Page 147
External RADIUS Server, RADIUS Server Authentication with VSA
View all Dell W-Series 277 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 147 highlights
External RADIUS Server In the external RADIUS server, the IP address of the VC is configured as the NAS IP address. Instant RADIUS is implemented on the VC and this eliminates the need to configure multiple NAS clients for every W-IAP on the RADIUS server for client authentication. Instant RADIUS dynamically forwards all the authentication requests from a NAS to a remote RADIUS server. The RADIUS server responds to the authentication request with an Access-Accept or Access-Reject message, and the clients are allowed or denied access to the network depending on the response from the RADIUS server. When you enable an external RADIUS server for the network, the client on the W-IAP sends a RADIUS packet to the local IP address. The external RADIUS server then responds to the RADIUS packet. Instant supports the following external authentication servers: l RADIUS l LDAP l ClearPass Policy Manager Server for AirGroup CoA To use an LDAP server for user authentication, configure the LDAP server on the VC, and configure user IDs and passwords. To use a RADIUS server for user authentication, configure the RADIUS server on the VC. RADIUS Server Authentication with VSA An external RADIUS server authenticates network users and returns to the W-IAP the vendor-specific attribute (VSA) that contains the name of the network role for the user. The authenticated user is placed into the management role specified by the VSA. Instant supports the following VSAs for user role and VLAN derivation rules: l AP-Group l AP-Name l ARAP-Features l ARAP-Security l ARAP-Security-Data l ARAP-Zone-Access l Acct-Authentic l Acct-Delay-Time l Acct-Input-Gigawords l Acct-Input-Octets l Acct-Input-Packets l Acct-Interim-Interval l Acct-Link-Count l Acct-Multi-Session-Id l Acct-Output-Gigawords l Acct-Output-Octets l Acct-Output-Packets l Acct-Session-Id l Acct-Session-Time l Acct-Status-Type l Acct-Terminate-Cause l Acct-Tunnel-Packets-Lost l Add-Port-To-IP-Address Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 147