User guide

WM Access Domain Services Configuration
Summit WM20 User Guide, Software Release 4.2116
If there is an authentication server configured for this WM-AD, the external Captive Portal page on
the external authentication server will send the request back to the Summit WM Controller to allow
the Summit WM Controller to continue with the RADIUS authentication and filtering.
In the Shared Secret box, type the password common to both the Summit WM Controller and the
external Web server if you want to encrypt the information passed between the Summit WM
Controller and the external Web server.
8 In the Redirection URL box, type the URL to which the wireless device user will be directed to
before authentication.
9 To save your changes, click Save.
NOTE
You must add a filtering rule to the non-authenticated filter that allows access to the External Captive Portal site.
For more information, see “Filtering for a WM-AD” on page 90.
Defining Authentication for a WM-AD for AAA
If network assignment is AAA with 802.1x authentication, the wireless device must successfully
complete the user authentication verification prior to being granted network access. This enforcement is
performed by both the user's client and the AP. The wireless device's client utility must support 802.1x.
The user's EAP packets request for network access along with login identification or a user profile is
forwarded by the Summit WM Controller to a RADIUS server.
NOTE
In order to use WPA with 802.1x authentication, network assignment must be AAA.
To define authentication by AAA (802.1x):
1 From the main menu, click WM-AD Configuration. The WM-AD Configuration screen is
displayed.
2 In the left pane WM Access Domainss list, click the WM-AD you want to set up authentication by
AAA for. The Topol ogy tab is displayed.
3 Click the Auth & Acct tab. On the Auth & Acct tab, there are three options:
● Auth – Use to define authentication servers.
● MAC – Use to define servers for MAC-based authentication.
● Acct – Use to define accounting servers.