User Manual

Advanced Configuration
66
12. Enter the maximum number of times an authentication request may be retransmitted in the Maximum
Retransmissions field. Range is 1-4; default is 3.
13. If you are configuring a back-up server, repeat Steps 7 through 12 for the back-up server.
14. Click OK to save your changes.
15. Reboot the AP-600 device for these changes to take effect.
RADIUS Accounting
Using an external RADIUS server, the AP-600 can track and record the length of client sessions on the access point by
sending RADIUS accounting messages per RFC2866. When a wireless client is successfully authenticated, RADIUS
accounting is initiated by sending an “Accounting Start” request to the RADIUS server. When the wireless client
session ends, an “Accounting Stop” request is sent to the RADIUS server.
Session Length
Accounting sessions continue when a client reauthenticates to the same AP-600. Sessions are terminated when:
• A client disassociates.
• A client does not transmit any data to the AP-600 for a fixed amount of time.
• A client is detected on a different interface.
If the client roams from one AP-600 to another, one session is terminated and a new session is begun.
127(
127(127(
127(
This feature requires RADIUS authentication using MAC Access Control or 802.1x. Wireless clients
configured in the Access Point’s static MAC Access Control list are not tracked.
Configuring RADIUS Accounting
Follow these steps to enable RADIUS accounting on the AP-600:
1. Within the
RADIUS Accounting Configuration screen, place a check mark in the Enable RADIUS Accounting
box to turn on this feature.
2. Place a check mark in the box labeled Enable Primary RADIUS Accounting Server.
3. If you want to configure a back-up RADIUS server, place a check mark in the box labeled Enable Back-up
RADIUS Accounting Server.
4. Enter the session timeout interval in minutes within the Accounting Inactivity Timer field. An accounting session
automatically ends for a client that is idle for the period of time specified. Range is 1-60 minutes; default is
5 minutes.
5. Select a Server Addressing Format type (IP Address or Name).
• If you want to identify RADIUS servers by name, you must configure the Access Point as a DNS Client. See
DNS Client for details.
6. Enter the server’s IP address or name in the field provided.
7. Enter the port number which the AP-600 and the server will use to communicate. By default, RADIUS accounting
uses port 1813.
8. Enter the Shared Secret in the Shared Secret and Confirm Shared Secret field. This is a password shared by the
RADIUS server and the AP-600. The same password must also be configured on the RADIUS server.
9. Enter the maximum time, in seconds, that the AP-600 should wait for the RADIUS server to respond to a request in
the Response Time field. Range is 1-10 seconds; default is 3 seconds.
10. Enter the maximum number of times an authentication request may be retransmitted in the Maximum
Retransmissions field. Range is 1-4; default is 3.
11. If you are configuring a back-up server, repeat Steps 5 through 10 for the back-up server.
12. Click OK to save your changes.
13. Reboot the AP-600 device for these changes to take effect.