WESM zl Management and Configuration Guide WT.01.28 and greater

11-29
RADIUS Server
RADIUS Authentication
Figure 11-12.Adding a Domain Proxy Server
4. In the Realm Name field, enter the domain name for users who authenticate to
the domain proxy server.
When a user submits his or her username, the Wireless Edge Services zl Module’s
internal server checks the domain name. If this name matches the name in the
Realm Name field, the internal RADIUS server queries the proxy server speci-
fied below.
For example, you enter “procurve.com” in the Realm Name field. If a user enters
“Joe” as his username, the internal RADIUS server uses its local database to
authenticate him. If the user enters “[e-mail],” the internal server uses
the proxy server to authenticate Joe.
The internal RADIUS sends the username to the proxy server with the full
domain extension.
The domain name can be up to 50 alphanumeric and special characters.
5. In the IP Address and Port Number fields, specify the external RADIUS server’s
IP address and port. The default port for RADIUS is 1812.
6. In the Shared Secret field, enter a string, which can include up to 31 alphanu-
meric and special characters.
The Wireless Edge Services zl Module must be configured as a RADIUS client
on the external RADIUS server, and the client configuration must include this
exact shared secret.
7. Click the OK button.
The external RADIUS server is now displayed in the Domain Proxy Servers
section.