User guide

Canopy System User Guide Choosing Authentication Mode and

Configuring for Authentication Servers -

pmp-0229 (Mar 2013)

447

SM Authentication Mode – Require RADIUS or Follow

If it is desired that an SM will only authenticate to an AP that is using RADIUS, on the

SM’s

Configuration Security tab set Enforce Authentication to AAA. With this enabled, an SM

will

not register to an AP that has any Authentication Mode other than RADIUS AAA

selected

If it is desired that an SM use the authentication method configured on the AP it is

registering

to, set Enforce Authentication to Disabled. With Enforce Authentication disabled, an SM

will attempt to register

using

whichever Authentication Mode is configured on the AP it is

attempting to register

to.

Note, requiring SMs to use RADIUS by enabling Enforce Authentication avoids the security

issue

SMs possibly registering to “rogue” APs which have authentication

disabled.