3Com 3CRGPC10075 User Manual

Also see for 3CRGPC10075: Declaration of conformity

Contents

42 CHAPTER 3: C ONFIGURING THE ACCESS P OINTc In RADIUS Server Address, type the IP address or host name of theRADIUS server that will authenticate clients.d In RADIUS Port, type the port number on the RADIUS server that isconfigured for communication with RADIUS clients.e In Shared Key, type the same key value as the one you set on theRADIUS server.f Click Save, and then click Close.When internal UAM authentication is enabled and configured, anywireless user that attempts to connect to the Internet using a Webbrowser (HTTP/TCP port 80) is redirected to the logon page. After theuser enters a user name and password on the logon page, the RADIUSserver checks its database to verify that the logon credentials are valid.If the logon credentials are valid, user will be authenticated and allowedaccess to the Internet. An entry xx:xx:xx:xx:xx:xx WEBauthentication (where xx:xx:xx:xx:xx:xx is the wireless station’sMAC address) is added to the Access Point log. The wireless station’sstatus also appears as Authenticated on the list of associated stations.If the logon credentials are invalid, the user will not be able to access anyother Web page, except for the logon page. An entryxx:xx:xx:xx:xx:xx WEB authentication failed is added to the log,and the station’s status appears as Authenticating on the list ofassociated stations.External UAM AuthenticationTo use external UAM authentication, do the following:1 Ensure that the Access Point can log on to the RADIUS server as a RADIUSclient.■ Create a RADIUS client account for the Access Point on the RADIUSserver. Use the Access Point’s IP address or name and specify the sameshared key as configured on the Access Point.■ Verify that the correct RADIUS server address, port, and shared key areconfigured on the Access Point. This information is entered either onthe Security screen or the UAM screen, depending on the securitymethod used.2 Create user accounts on the RADIUS server database, and then grantthem access to the Internet.