User guide
Table Of Contents
- Introduction
- Installation and Initialization
- Managing the Access Point
- Basic Configuration for an Enterprise
- Access Point Features
- Using Web Interface to Manage the Access Point
- Using SNMP Interface to Manage the Access Point
- Using CLI to Manage the Access Point
- Global Configuration Mode
- General Notes
- Configuring the AP using CLI Commands
- Command Line Interface Mode Overview
- User Exec Mode
- Privileged Exec Mode
- Show Command Tree Structure Command
- Show VLAN Command
- Show MAC ACL Command
- Show RADIUS Server Table Command
- Show RADIUS Supported Profile Table Command
- Show Security Wireless Config Table Command
- Show QoS Profile and Policy Command
- Show QoS EDCA Command
- Show Wireless Properties Command
- Show 11n Wireless Properties Command
- Wireless VAP Command
- Ethernet Interface Command
- Network Configuration Command
- Advaned Filter and Global Filter Command
- TCP-UDP and Static MAC Address Table Commands
- Protocl Filter, Filter Type and Filter Control Table Command
- Access Control and HTTP, Telnet and TFTP Commands
- SNMP Read, Read-Write Password and Trap Host Table Command
- Country Code and Management Commands
- System Information Command
- System Inventory Management Command
- Event Logand ICMP Commands
- IP ARP Statistics and SNTP Command
- Syslog configuration and RADIUS Client Authentication Table Commands
- RADIUS Client Access Command
- Interface Statistics Command
- Wireless Station Statistics Command
- IP Address, Subnet Mask and Gateway Command
- Scalar Objects Commands
- Table Entries Commands
- Table Entry Deletion Command
- Table Entry Edition Command
- VAP Table Commands
- Troubleshooting
- ASCII Character Chart
- Bootloader CLI
- Specifications
- Technical Services and Support
- Statement of Warranty
Access Point Features AP-800 User Guide
Configuring the Device
40
RADIUS Accounting
Using an external RADIUS server, the AP can track and record the length of client sessions on the access point by
sending the RADIUS accounting messages per RFC2866. When a wireless client is successfully authenticated, RADIUS
accounting is initiated by sending an “Accounting Start” request to the RADIUS server. When the wireless client session
ends, an “Accounting Stop” request is sent to the RADIUS server.
NOTE: Each VLAN can be configured to use a separate RADIUS accounting server (and backup accounting server).
Session Length
Accounting sessions continue when a client reauthenticates to the same AP. Sessions are terminated when:
1. A client disassociates
2. Session-Timeout attributes are configured in the Radius server.
If the client roams from one AP to another, one session is terminated and a new session begins.
NOTE: This feature requires RADIUS authentication using 802.1x. If the clients are using Local MAC Authentication or
RADIUS MAC Authentication, then the session length is not tracked.
Authentication Attributes
• User-Name
This Attribute indicates the name of the user that needs to be authenticated. It must be sent in Access-Request packets if
available.
• User-Password
This Attribute indicates the password of the user to be authenticated, or the user's input following an Access-Challenge.
It is only used in Access-Request packets.
• NAS-IP-Address
This Attribute indicates the identifying IP Address of the NAS which is requesting authentication of the user, and should
be unique to the NAS within the scope of the RADIUS server. NAS-IP-Address is only used in Access-Request packets.
•State
This Attribute is available to be sent by the server to the client in an Access-Challenge and must be sent unmodified from
the client to the server in the new Access-Request reply to that challenge, if any.
• Class
This Attribute is available to be sent by the server to the client in an Access-Accept and should be sent unmodified by the
client to the accounting server as part of the Accounting-Request packet if accounting is supported.
• Session-Timeout
This Attribute sets the maximum number of seconds of service to be provided to the user before termination of the
session or prompt. This Attribute is available to be sent by the server to the client in an Access-Accept or
Access-Challenge.
• Termination-Action
This Attribute indicates what action the NAS should take when the specified service is completed. It is only used in
Access-Accept packets.
• Called-Station-Id
This Attribute allows the NAS to send in the Access-Request packet the phone number that the user called, using Dialed
Number Identification (DNIS) or similar technology. It isonly used in Access- Request packets.
• Calling-Station-Id