Filter
Top Products
56
2.13.2.1. Basic
Fig. 89. RADIUS basic settings.
For the IWE3200-H, the RADIUS client component of the Router is shared by the IEEE 802.1x and
Web redirection components. The RADIUS settings are for the RADIUS client to communicate with
backend RADIUS servers.
NOTE:
The RADIUS server do not support all combinations of authentication methods if both
IEEE 802.1x and Web redirection are enabled. The following table shows the allowable
IEEE 802.1x and Web redirection authentication modes.
IEEE 802.1x
Disabled
IEEE 802.1x
EAP-MD5
IEEE 802.1x
EAP-TLS
Web Redirection
Disabled
■ ■ ■
Table 2. Allowable authentication modes.
The IWE3200-H can be configured to communicate with two RADIUS servers. When the primary
RADIUS server fails to respond, the IWE3200-H will try to communicate with the secondary RA-
DIUS server. You can specify the length of timeout and the number of retries before communicating
with the secondary RADIUS server after failing to communicate with the primary RADIUS server.
The IWE3200-H and its RADIUS server(s) share a secret key so that they can authenticate each other.
In addition to its IP address, the IWE3200-H can identify itself by an NAS (Network Access Server)
identifier. Each IWE3200-H must have a unique NAS identifier.
2.13.2.2. Robustness
Fig. 90. RADIUS robustness settings.
The Router can be configured to notify the RADIUS server after it reboots. The RADIUS server can
make use of the notification to clean up user authentication session records in the event that the
Router reboots unexpectedly due to abnormal operation.
Select the Notify RADIUS server after reboot check box to enable this capability, and then specify
the name of the pseudo user (default to “reboot”) for this operation in the Reboot user name text box.