User manual SMC SMC2504W

[. . . ] . ELITECONNECT WLAN SECURITY SYSTEM Full authentication support--supports RADIUS, LDAP, 802. 1x, Kerberos, Windows NT/2000 domain and built-in database. VPN support allows secure wireless communications to and from wireless clients. Rights-based network access increases network security by providing network administrators full control on users' access to a network, based on user identification, location, and time. Web-based configuration is easy-to-use, convenient and provides simple configuration management. [. . . ] Step 3. Type the MAC address in the User Name text box, as shown in Figure 646. Click the This user is a MAC address user check box. Figure 6-46. User Editor with MAC Address for User Name Step 4. Click Update. The User Manager shows the MAC address added as a user, as shown in Figure 6-47. EliteConnect WLAN Security System User Manual 6-39 MAC Address Added Figure 6-47. User Manager Showing MAC Address Added Note: If you wanted to give the MAC address user special rights that the Implicit User group does not have, add the MAC address user to a particular Normal group. You must allow that Normal group at the locations that you want those rights to apply. 6. 7 Enforcing Authentication SMC uses the following authentication services: · Built-in (the default service created by SMC) · LDAP · RADIUS · Kerberos The Built-in service is available if you choose not use the other authentication services in place. Depending on your enterprise network, you might use one or more of these authentication services, or you might have back-up servers if your primary service is not available. To choose your authentication method: Step 1. Start with the Rights Manager Screen, as shown in Figure 6-48 on page 641, and click Authentication. 6-40 Configuring the Rights Manager Click Figure 6-48. Clicking Authentication from User Manager Screen If you are choosing an Authentication service for the first time, you see the Built-in method screen, as shown in Figure 6-49 on page 6-41. If you have previously chosen an Authentication Service, you see the screen for that service. Figure 6-49. Built-in Authentication Method EliteConnect WLAN Security System User Manual 6-41 To use the Built-in Authentication service: Step 1. Step 3. Click the Built-in checkbox on the Authentication screen, as shown in Figure 6-49 on page 6-41. If you configure 802. 1x Logons, use the Where Editor from the Location Editor to enable watching for 802. 1x logons. If you enable 802. 1x logons, use these fields to specify the 802. 1x RADIUS server: Type the port number. Step 6. To use the LDAP Authentication Service: Step 1. From the Rights Manager Authentication screen, click LDAP. The LDAP authentication screen appears, as shown in Figure 6-50 on page 6-42. Figure 6-50. LDAP Authentication Screen 6-42 Configuring the Rights Manager Step 2. Enter the information requested. The information is needed to interoperate with your enterprise LDAP service. See Table 6-2 for description of these fields. Table 6-2 LDAP Authentication Options Entry Name Server Username field Port Timeout Base DN Group Field Receive user password Password field Password Encryption Anonymous bind Bind using rootdn/rootpw Rootdn Rootpw Send user password Format for user bind string Step 3. Explanation Your name of this group of authentication services; you can use any name. Fully Qualified Domain Name (FQDN) of the server running the LDAP service Field to use to retrieve the Username Port for LDAP (typically 389) Authentication timeout period The suffix for LDAP Group field to retrieve after successful authentication Click this checkbox to receive user the password Field to use for to retrieve user password Select one of the following: Crypt, SHA, SSHA, MD5, SMD5, no encryption (CLEAR) Bind without a username and password Bind using the rootdn username and password The rootdn for your LDAP server The rootpw for your LDAP server Click this checkbox to send the user password String to user for doing a user-level bind Click Update. To use the RADIUS Authentication Service: Step 1. From the Rights Manager Authentication screen, click RADIUS. The RADIUS authentication screen appears, as shown in Figure 6-51 on page 6-44. EliteConnect WLAN Security System User Manual 6-43 Figure 6-51. RADIUS Authentication Screen Step 2. Enter the information requested. [. . . ] Some set of rights are associated with the location. the rights given to a client who has not yet logged on The glossary defines terms that are used throughout the WLAN Security System. Some of the following terms are in common usage but have WLAN Security System-specific meanings. These terms are defined in context in the chapter where they first appear. Allows Authentication Client Control Server Expire time Everywhere else Groups Guest Implicit user Linger time Location Logon users E-1 Management Information Base (MIB) Network Address Translated (NAT) Normal group Packet filters Port Address Translation (PAT) Realm Redirects Rights Manager Roaming Session redirectors Static IP VPN Security (Airwave Security) WLAN Access Manager a specification of a collection of objects (or data) that exists in a network device. [. . . ]