Concept Guide

External RADIUS Server
In the external RADIUS server, the IP address of the VC is configured as the NAS IP address. Instant RADIUS is
implemented on the VC and this eliminates the need to configure multiple NAS clients for every W-IAP on the
RADIUS server for client authentication. Instant RADIUS dynamically forwards all the authentication requests
from a NAS to a remote RADIUS server. The RADIUS server responds to the authentication request with an
Access-Accept or Access-Reject message, and the clients are allowed or denied access to the network
depending on the response from the RADIUS server. When you enable an external RADIUS server for the
network, the client on the W-IAP sends a RADIUS packet to the local IP address. The external RADIUS server
then responds to the RADIUS packet.
Instant supports the following external authentication servers:
l RADIUS
l LDAP
l ClearPass Policy Manager Server for AirGroup CoA
To use an LDAP server for user authentication, configure the LDAP server on the VC, and configure user IDs
and passwords. To use a RADIUS server for user authentication, configure the RADIUS server on the VC.
RADIUS Server Authentication with VSA
An external RADIUS server authenticates network users and returns to the W-IAP the vendor-specific attribute
(VSA) that contains the name of the network role for the user. The authenticated user is placed into the
management role specified by the VSA.
Instant supports the following VSAs for user role and VLANderivation rules:
l AP-Group
l AP-Name
l ARAP-Features
l ARAP-Security
l ARAP-Security-Data
l ARAP-Zone-Access
l Acct-Authentic
l Acct-Delay-Time
l Acct-Input-Gigawords
l Acct-Input-Octets
l Acct-Input-Packets
l Acct-Interim-Interval
l Acct-Link-Count
l Acct-Multi-Session-Id
l Acct-Output-Gigawords
l Acct-Output-Octets
l Acct-Output-Packets
l Acct-Session-Id
l Acct-Session-Time
l Acct-Status-Type
l Acct-Terminate-Cause
l Acct-Tunnel-Packets-Lost
l Add-Port-To-IP-Address
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 147