D-Link DWS 3000 Network Router User Manual


 
FreeRADIUS Server Configuration Example 181
Configuring the External RADIUS Server
FreeRADIUS Server Configuration Example
FreeRADIUS is an open source RADIUS server that you can download free from
http://www.freeradius.org. The example in this section describes the files you need to
configure in order to authenticate the D-Link WLAN Controller Switch and the D-Link
Access Point with the RADIUS server and to configure the Valid AP settings in the RADIUS
database.
Configuring RADIUS Clients
If you require the D-Link WLAN Controller Switch or D-Link Access Points to authenticate
themselves with the RADIUS server, you must configure client entries for the devices in the
RADIUS server’s
etc/raddb/clients.conf file.
The entry contains the IP address of the client, the shared secret, and a nickname (or DNS
name) for the device.
The following entry in the
clients.conf file is for a switch with the following information:
IP address: 192.168.30.249
Subnet mask: 255.255.255.0
Shared secret: wireless
DNS name: wireless-sw1
The following code shows the format of the client entry in the
clients.conf file:
client 192.168.30.249/24 {
secret = wireless
shortname = wireless-sw1
}
Creating and Including an Attribute Dictionary
You configure attributes in an attribute dictionary so that you can assign the attributes and
values to an access point when you configure it in the Valid AP database on the RADIUS
server. For example, to assign a location to an access point, the attribute you define has the
following format:
ATTRIBUTE D-Link-Wireless-AP-Location 101 string D-Link
The fields in the attribute are as follows:
Attribute—type of entry
D-Link-Wireless-AP-Location—name of the attribute
101—ID number assigned to the attribute; you must use this number when you configure
the location attribute
string—type of data for the attribute
D-Link—vendor-specific name for the attribute
The following VALUE field defines one of the of values you can assign to an AP for the AP
Mode.
VALUE D-Link-Wireless-AP-Mode WS-Managed 1