Authentication With A Radius Server - NETGEAR ProSafe WFS709TP Software Administration Manual

WFS709TP ProSafe Smart Wireless Switch Software Administration Manual
You can terminate the 802.1x authentication on the WFS709TP. The switch passes user
authentication to its internal database or to a "backend" non-802.1x server. This feature, also
called AAA FastConnect, is useful for deployments where an 802.1x EAP-compliant RADIUS
server is not available or required for authentication.

Authentication with a RADIUS Server

Figure 7-1 is an overview of the parameters that you need to configure on authentication
components when the authentication server is an 802.1x EAP-compliant RADIUS server.
Client
(Supplicant)
EAP type
ESSID
Network authentication
Data encryption
Figure 7-1
The supplicant and authentication server must be configured to use the same EAP type. The
WFS709TP does not need to know the EAP type used between the supplicant and authentication
server.
7-2
WFS709TP
(Authenticator)
Server IP
Shared secret
Auth port
Acct port
ESSID
Network authentication
Data encryption
v1.0, June 2007
Authentication
server
EAP type
Client IP
Shared secret
Configuring 802.1x Authentication