Allied Telesis AT-S80 - Manual (Page 202)

Chapter 18: RADIUS Authentication Protocol
202 Section I: Using the Menus Interface
RADIUS Overview
RADIUS (Remote Authentication Dial In User Services) is an
authentication protocol for enhancing the security of your network. The
protocol transfers the task of authenticating network access from a
network device to an authentication protocol server.
The AT-S80 management software comes with RADIUS client software.
You can use the client software together with 802.1x port-based network
access control to control which end users and end nodes can send
packets through the switch. See Chapter 17, “802.1x Port-based Network
Access Control” on page 185.
RADIUS
Implementation
Guidelines
What do you need to use the RADIUS protocol? Following are the main
points.
ˆ You must install RADIUS server software on a network server or
management station. Authentication protocol server software is not
available from Allied Telesis.
ˆ The RADIUS server must be communicating with the switch through a
port that is an untagged member of the Default VLAN.
ˆ If the RADIUS server is on a different subnet from the switch, be sure
to specify a default gateway in the System IP Configuration Menu,
shown in Figure 5 on page 33, so that the switch and server can
communicate with each other.
ˆ You need to configure the RADIUS server software on the
authentication server by specifying the username and password
combinations. The maximum length of a username or password is 12
alphanumeric characters.
Note
This manual does not explain how to configure RADIUS server
software. Refer to the documentation that came with the software for
instructions.
ˆ You must activate the RADIUS client software on the switch using the
AT-S80 Management Software and configure the settings. This is
explained in “Configuring the RADIUS Client” on page 203. By default,
authentication protocol is disabled.
Note
For more information on the RADIUS authentication protocol, refer
to the RFC 2865 standard.