User's Manual

7 Managing Security
164 Installation and User Guide: Airgo Access Point
Other standard or vendor-specific attributes can be used to determine service policies. For example,
an enterprise having an existing RADIUS attribute for VLANs (Tunnel-Private-Group-ID) can
reuse the attribute for service profile assignment by configuring it as the RADIUS attribute for user
groups. This can be accomplished by selecting RADIUS Standard Attribute Type 81, with a string
interpretation. The VLAN string that is returned by the RADIUS server will then be used as the
name of the user-group.
For attributes that return integer values, the group name will be the string representation of the
same integer. For example, the integer 1 will be treated as the group name “1.”
Click Apply to implement changes, or click Reset to return the entries on the panel to their
previous values.
Configuring Zone Privacy
Choose Zone Privacy from the menu tree to open the configuration panel for zone privacy
(Figure 118).
Figure 118: Zone Privacy
RADIUS Retries Number of retransmit attempts after which the RADIUS request is marked a
failure.
External RADIUS
Group-Key Attribute
(for User Group ID)
RADIUS attribute used by the AP to determine the user group (see “SSID
Details” on page 87). When a wireless user is authenticated by a RADIUS
server, the server can optionally send the AP the user group for the
association. If a user group is not returned, the user is not assigned a group
and gets the default service profile for the SSID. By default, a Vendor Specific
Attribute is used (13586, 1, String).
Field Description