D-Link DWS-1008 User Manual
1
For the port-list of the
set port type wired-auth and set radius proxy port commands, specify the
switch port(s) connected to the third-party AP.
For the ip-address of the
set radius proxy client address command, specify the IP address of the
RADIUS client (the third-party AP). For the
udp-port-number
, specify the UDP port on which the switch
will listen for RADIUS access-requests. The default is UDP port 1812. For the
acct-udp-port-number
,
specify the UDP port on which the switch will listen for RADIUS stop-accounting records. The default is
UDP port 1813.
The following command configures switch ports 3 and 4 as wired authentication ports, and assigns tag
value 104 to the ports:
DWS-1008#
set port type wired-auth 3-4 tag 104
success: change accepted.
You can specify multiple tag values. Specify the tag value for each SSID you plan to support.
The following command configures a MAC authentication rule that matches on the third-party AP’s
MAC address. Because the AP is connected to the switch on a wired authentication port, the wired
option is used.
DWS-1008#
set authentication mac wired aa:bb:cc:01:01:01 srvrgrp1
success: change accepted.
The following command maps SSID mycorp to packets received on port 3 or 4, using 802.1Q tag value
104:
DWS-1008#
set radius proxy port 3-4 tag 104 ssid mycorp
success: change accepted.
Enter a separate command for each SSID, and its tag value, you want the switch to support.
The following command configures a RADIUS proxy entry for a third-party AP RADIUS client at
10.20.20.9, sending RADIUS traffic to the default UDP ports 1812 and 1813 on the switch:
DWS-1008#
set radius proxy client address 10.20.20.9 key radkey1
success: change accepted.
The IP address is the AP’s IP address. The key is the shared secret configured on the RADIUS servers.
MSS uses the shared secret to authenticate and encrypt RADIUS communication.
The following command configures a proxy authentication rule that matches on all usernames associated
with SSID mycorp. MSS uses RADIUS server group
srvrgrp1
to proxy RADIUS requests and hence to
authenticate and authorize the users.
DWS-1008#
set authentication proxy ssid mycorp ** srvrgrp1
To verify the changes, use the
show config area aaa command.
Summary of Contents for DWS-1008
Page 1: ......
