DSA-6100 User Guide
88
y
802.1X Authentication:
When enabled, this system can authenticate RADIUS clients against the external
RADIUS server. Enable this function and the hyperlink of
RADIUS Client List
will appear. Click the hyperlink to
get into the RADIUS Client Configuration list for further configuration. Please refer to
RADIUS Roaming
Out/802.1x Authentication
in
4.4.1.1 Local Server
.
y
RADIUS Client List:
The administrator could further set up for the 802.1x capable device that are allowed to
be authenticated against the external RADIUS server via this system. Select type “802.1x Authentication” from
the drop down list, and then enter IP address, Subnet Mask, and shared Secret Key of the authorized devices.
y
Trans Full Name:
When enabled, both the username and postfix will be transferred to the RADIUS server for
authentication. When disabled, only the username will be transferred to RADIUS server for authentication.
y
Class Mapping:
Class Attribute can be specified to map to internal Policy.
y
Server IP:
Enter the IP address/domain name of the RADIUS server.
y
Authentication Port:
Enter the authentication port of the RADIUS server and the default value is 1812.
y
Accounting Port:
Enter the accounting port of the RADIUS server and the default value is 1813.
y
Secret Key:
Enter the key for encryption and decryption.
y
Accounting Service:
Select this to enable or disable the
“Accounting Service”
for accounting capabilities.
y
Authentication Protocol:
Define authentication transmission protocol. Configurations must match remote
RADIUS configurations. PAP (Password Authentication Protocol) transmit password in plain text without
encryption. CHAP (Challenge Handshake Authentication Protocol) is a more secured authentication protocol
using hash encryption.