User Guide

Topology Example Two 231

Chapter 17

5 To enable the APs to accept associations from clients, configure the Max

Clients value on the

Wireless LAN > Radio > 802.11b/g page. ( Configure the

same on the 802.11a page if you are also using 802.11a clients).

FIGURE 17-4 Configuring the Radios

6 Apply this configuration to enable Access Points to accept associations.

For the RADIUS server configuration, the client IP address is the IP address of

the interface that connects the Alcatel Mobility Controller to the RADIUS

server. In this example, VLAN 14 is the interface. Therefore, the client IP

address for the RADIUS server configuration is the IP address of the VLAN 14

interface (10.200.14.6).

The NAS-IP-Address

is the loopback IP address or the switch IP of the Alcatel

Mobility Controller. In this case, the value of this IP address if 10.200.14.14.

7 Configure the roles and their associated privileges for the users authenti-

cated using 802.1x and the guest users (authenticated by using guest

logon on captive portal). To do this, create a role called “authenti-

cated-user” on the

Configuration > Security > Role page and configure it to

have all privileges by adding the pre-defined policy called allowall to the

list of policies for this role.

1.Effective with AOS-W 2.4 and higher, you can configure the NAS-IP-Address attribute per RA-

DIUS server (as opposed to one NAS IP address per system). This means you can configure a

Wireless LAN environment with multiple RADIUS servers, each owned by a different ISP.