User Guide

PMP 450 Planning Guide System management
pmp-0047 (December 2012)
1-21
• GUEST, who has no write permissions and only a limited view of General Status tab
See Table 24 Identity-based user account permissions - AP on page 2-51 and Table 25 Identity-based user account
permissions - SM on page 2-53 for detailed information on account permissions.
Remote Authentication Dial In User Service (RADIUS)
The PMP 450 system includes support for RADIUS (Remote Authentication Dial In User Service) protocol
functionality including:
• Authentication: Allows only known SMs onto the network (blocking “rogue” SMs), and can be configured to
ensure SMs are connecting to a known network (preventing SMs from connecting to “rogue” APs). RADIUS
authentication is used for SMs, but not used for APs.
• SM Configuration: Configures authenticated SMs with MIR (Maximum Information Rate), High Priority, and
VLAN (Virtual LAN) parameters from the RADIUS server when an SM registers to an AP.
• SM Accounting provides support for RADIUS accounting messages for usage-based billing. This accounting
includes indications for subscriber session establishment, subscriber session disconnection, and bandwidth
usage per session for each SM that connects to the AP.
• Centralized AP and SM user name and password management: Allows AP and SM usernames and access
levels (Administrator, Installer, Technician) to be centrally administered in the RADIUS server instead of on
each radio and tracks access events (logon/logoff) for each username on the RADIUS server. This accounting
does not track and report specific configuration actions performed on radios or pull statistics such as bit counts
from the radios. Such functions require an Element Management System (EMS) such as Cambium Wireless
Manager. This accounting is not the ability to perform accounting functions on the subscriber/end
user/customer account.
• Framed-IP-Address: Operators may use a RADIUS server to assign management IP addressing to SM
modules.
SNMP
The management agent supports fault and performance management by means of an SNMP interface. The
management agent is compatible with SNMP v1 and SNMP v2c using 5 Management Information Base (MIB) files
which are available for download from the Cambium Networks Support website
(http://www.cambiumnetworks.com/support/pmp/software/
).
Network Time Protocol (NTP)
The clock supplies accurate date and time information to the system. It can be set to run with or without a
connection to a network time server (NTP). It can be configured to display local time by setting the time zone and
daylight saving in the Time web page.
If an NTP server connection is available, the clock can be set to synchronize with the server time at regular
intervals.