Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.02.xx and greater

5-14
Web Authentication for Mobile Users
Configuring Web-Auth
8. In the fields in the Server area, define the primary RADIUS server under
the Primary heading.
a. In the RADIUS Server Address field, enter the IP address of the RADIUS
server that authenticates users.
Enter 127.0.0.1 if you are using the Wireless Edge Services xl Module’s
internal RADIUS server.
b. In the RADIUS Port field, leave the port number at the default value
(1812) unless your RADIUS server uses a different port.
c. In the RADIUS Shared Secret field, enter the shared secret that the
RADIUS server uses to identify the Wireless Edge Services xl Module
as a valid RADIUS client (or network access server [NAS]).
You do not need to set the secret if you are using the module’s internal
RADIUS server. (If you have previously set the secret, clear the field.)
9. If you have a backup RADIUS server, repeat step 8 in the fields under the
Secondary heading.
10. In the Server Timeout field, enter a timeout value in seconds.
This setting determines how long the module waits for a reply from the
RADIUS server. The default setting is 5 seconds.
11. In the Server Retries field, enter the number of times that the Wireless Edge
Services xl Module should re-attempt to contact the RADIUS server.
The default setting is 3, which means that the module attempts to contact
the server up to four times.
12. In the Advanced section, choose the authentication protocol that the
Wireless Edge Services xl Module uses to forward the username and
password to the RADIUS server.
You can choose PAP or CHAP. Match the setting allowed in the RADIUS
server’s policy. The module’s internal RADIUS server supports both pro-
tocols. However, if you choose PAP, users’ passwords display in plaintext
in logs. Generally, you should choose CHAP for higher security.
13. Click the OK button to apply the settings and close the screen.
14. On the WLAN Edit screen, under Authentication, click the Config button
next to Web-Auth. The Web-Auth screen is displayed.