Specifications

6-9

Configuring the AP for Authentication

Authentication uses a RADIUS server to authenticate wireless clients in a wireless

infrastructure network. Refer to Authentication on page 2-16 for a description of the types

of authentication. The following lists the basic tasks to configure for authentication:

• Configuring a RADIUS server (not described in this document).

• Configuring the AP as a RADIUS client and choosing the type of authentication.

The AP 2000 has the option of using the default RADIUS Management Authenticator

or creating a custom authenticator. The R2 uses SNMPv3 instead of a Management

Authenticator.

• Configuring for Rapid Rekeying (optional, if MAC address or hybrid authentication is

not used).

RADIUS Management Authenticator (AP 2000 Only)

The AP RADIUS Management Authenticator security feature allows you to specify an

authenticator that encrypts the SNMP Objects used between the AP Manager and the

Access Point 2000 for management of critical RADIUS client parameters. You can enter a

custom RADIUS Management Authenticator, or use the AP’s default RADIUS

Management Authenticator. The Management Authenticator can be changed at anytime.

NOTE: If using authentication and managing the AP using the web

interface, you should enable TLS for secure web sessions, as described in

Configuring for Secure Web Management Sessions on page 6-23.

NOTE: When you enter a custom authenticator, you are prompted for a

password. After you enter the password, only those with the password can

access the custom RADIUS Authenticator.

If you reset to factory defaults, the AP RADIUS Management Authenticator

is cleared and reset to the default. To view the AP RADIUS client

parameters, you must restore the default RADIUS client management

authenticator in the AP.