User guide

Virtual Network configuration
A31003-W1010-A100-1-7619, July 2005
82 HiPath Wireless Controller, Access Points and Convergence Software V3.0: User Guide
HWC_VNSConfiguration.fm
Authentication for a VNS
5. In the Auth. Type field, select the authentication protocol to be used by the RADIUS server
to authenticate the wireless device users (for a VNS with Captive Portal authentication).
6. In the Include VSA Attributes area, click on the appropriate checkbox to include the
Vendor Specific Attributes in the message to the RADIUS server: AP Identification, VNS
Identification, and SSID Identification.
The Vendor Specific Attributes must be defined on the RADIUS Server.
7. If appropriate, click the Set as primary server checkbox on.
8. To save this configuration, click on Save.
Define the RADIUS server priority for RADIUS redundancy
If more than one server has been defined for any type of authentication, you can define the
priority of the servers in the case of failover.
1. Select from the drop-down list: Configured Servers, Authentication Servers, MAC Servers,
Accounting Servers.
2. Highlight a RADIUS server in the list and use the Up or Down key to change the order.
The first server in the list is the active one. In the event of a failover of the main RADIUS
server (if no response after the set number of retries), then the other servers in the list will
be polled on a round-robin basis until one responds.
If one of the other servers becomes the active one during a failover, an "A" will appear after
that server name.
If all defined RADIUS servers fail to respond, a critical message is generated in the logs.
NAS Identifier Network Access Server (NAS) identifier, a RADIUS attribute that
identifies the server responsible for passing information to designated
RADIUS Servers and then acting on the response returned. [Optional]
PAP (Password Authentication Protocol)
CHAP (Challenge Handshake Authentication Protocol)
MS CHAP (Windows-specific version of CHAP)
MS CHAP v2 (Windows-specific version of CHAP, version 2)
>
If you have already assigned a server to either MAC-based authentication or
accounting, and wish to use it again for authentication, highlight its name in the
list beside the Up and Down buttons. Click the Use server for Authentication
checkbox on. The boxed area populates with fields about this server.