User manual ZYXEL VANTAGE RADIUS 50 QUICK START GUIDE

[. . . ] Vantage RADIUS 50 Quick Start Guide Version 1. 0 3/2005 Vantage RADIUS 50 Quick Start Guide 1 Introducing Vantage RADIUS 50 The Vantage RADIUS (Remote Authentication Dial-In User Service) 50 (referred to in this guide as Vantage RADIUS) is a standalone RADIUS server. Vantage RADIUS maintains a list of accounts that are allowed access a wireless network that supports IEEE 802. 1x authentication. Vantage RADIUS can be set up as a local or remote RADIUS server. Active Directory Account allows authentication of user accounts via Vantage RADIUS using a server computer. [. . . ] 6 Vantage RADIUS 50 Quick Start Guide Click a link under MAINTENANCE to see system status, user information, upload firmware and back up, or restore or upload a configuration file. Click a link under MANAGEMENT to set up your Vantage RADIUS for remote access and monitoring connections. Click LOGOUT in the navigation panel when you have finished managing your device. The device automatically logs you out if it is left idle for five minutes. If this occurs, refresh your browser to display the Login screen again and then log back in. Navigation panel LOGOUT RESTART/RESET 4. 1 Common Screen Command Buttons The following table shows common command buttons found on many web configurator screens. Apply Cancel Click this button to save your changes back to the RADIUS. Click this button to begin configuring this screen afresh. 5 Configuring Your RADIUS Server 5. 1 Network Configuration Wireless clients need to be in the same subnet as the Vantage RADIUS. Clients access the network through the Vantage RADIUS. Now configure your Vantage RADIUS to access the gateway or router that provides access to your network. Click ADVANCED and the IP in the main menu of the Web Configurator to set up network access for your RADIUS server. 7 Vantage RADIUS 50 Quick Start Guide The following table describes the fields in this screen. LABEL IP Address Netmask Gateway Primary DNS DESCRIPTION Type an IP address in dotted decimal notation. Type the IP subnet mask of the RADIUS server in this field. Type the IP address of the gateway or router used to connect your RADIUS to the network. DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it. The RADIUS uses a system DNS server (in the order you specify here) to resolve domain names. Type an IP address in dotted decimal notation if given to you by your ISP. Secondary DNS MAC Address Type a backup DNS Server IP address in dotted decimal notation if given to you by your ISP. This field displays the physical address of your RADIUS server on the network. 5. 2 Secure Connections Vantage Radius authenticates accounts using secure connections. This means that every time information is sent across the network, the connection must come from a valid source and all transmitted information is sent encrypted. Currently there are two supported authentication protocols on the Vantage RADIUS. 8 Vantage RADIUS 50 Quick Start Guide MD5 (Message-Digest Algorithm 5) MD5 authentication is the simplest one-way authentication method. The authentication server sends a challenge to the wireless station. The wireless station `proves' that it knows the password by encrypting the password with the challenge and sends back the information. [. . . ] The key must be the same on the external authentication server and your wireless AP. The key is not sent over the network. 14 Vantage RADIUS 50 Quick Start Guide 1. Enable these fields to activate authentication and accounting services. 2. Enter the IP address of the RADIUS server in dotted decimal notation. 3. [. . . ]