Radius Fail-Through And Failover Server Support - D-Link DWS-3000 Series Configuration Manual

Configuration Guide
The client name is assigned at the time of creating client entry in the local MAC
Authentication list. To modify the name of an existing client entry, the entry must be deleted
and then re-added with the changed name.
Assigning a Client Name in a Local MAC Authentication List

RADIUS Fail-through and Failover Server Support

A secondary or backup RADIUS server can be defined for wireless client authentication using
WPA-Enterprise security. The secondary server acts as a "failthrough" server; if a user is not
authenticated successfully by the primary server, the authentication request is sent to the
secondary server after receiving the reauthentication request from the client. The
authentication fails if both the primary and the secondary server deny the authentication
request.
The secondary server also acts as a "failover" server in the sense that authentication requests
are sent to the secondary server if the primary server is not available for some reason.
For a managed AP solution, the secondary server is defined along with its secret in the AP
configuration profile on the DWS-3000 switch. Like the primary RADIUS server, the
secondary server configuration is sent to the AP. When a wireless client tries to authenticate
with the AP using RADIUS, the AP uses the two-server solution as described above.
The RADIUS primary and secondary servers can be configured in a configuration profile at
global level and at the network level. The decision of which servers to use is determined by the
global-radius flag defined for the network.
The RADIUS failthrough feature can be enabled or disabled by the administrator using the
Web interface, the CLI, or SNMP. The RADIUS failover feature is enabled by default and
cannot be disabled by the administrator.
126 © 2001- 2011 D-Link Corporation. All Rights Reserved.