User guide

WM Access Domain Services configuration
Summit WM Series WLAN Switch and Altitude Access Point Software Version 4.1 User Guide
108
7 To save your changes, click Save.
You can view the WM-ADs that each radio is assigned to by clicking on each radio tab in the
Altitude AP Configuration screen.
Authentication for a WM-AD
The next step in configuring a WM-AD is to set up the authentication mechanism. There are various
authentication combinations available:
● If network assignment is by SSID, authentication can be:
● none
● by Captive Portal using internal Captive Portal
● by Captive Portal using external Captive Portal
● by MAC-based authentication
● If network assignment is by AAA (802.1x), authentication can be:
● by 802.1x authentication, the wireless device user must be authenticated before gaining network
access
● by MAC-based authentication
The first step for any type of authentication is to select RADIUS servers for:
● Authentication
● Accounting
● MAC-based authentication
MAC-based authentication enables network access to be restricted to specific devices by MAC address.
In addition to the other types of authentication, when MAC-based authentication is employed the
Summit WM series switch queries a RADIUS server to determine if the wireless client's MAC address is
authorized to access the network.
Vendor Specific Attributes
In addition to the standard RADIUS message, you can include Vendor Specific Attributes (VSAs). The
Summit WM series switch, access points, and WLAN switch software authentication mechanism
provides six VSAs for RADIUS and other authentication mechanisms.
Table 4: Vendor Specific Attributes
Attribute Name ID Type Messages Description
Extreme-URL-
Redirection
1 string Returned from
RADIUS server
A URL that can be returned to redirect a
session to a specific Web page.
Extreme-AP-Name 2 string Sent to RADIUS
server
The name of the AP the client is associating to.
It can be used to assign policy based on AP
name or location.
Extreme-AP-Serial 3 string Sent to RADIUS
server
The AP serial number. It can be used instead of
(or in addition to) the AP name.