
Chapter 10: Configuring Security
Security Modes
Psion Teklogix 9160 G2 Wireless Gateway User Manual 117
Use internal
radius server
You can choose whether to use the built-in authentication server provided with the 9160 G2 Wireless Gateway,
or you can use an external radius server.
• To use the authentication server provided with the 9160 G2 Wireless Gateway, ensure the check-
box beside the Use internal radius server field is selected. If this option is selected, you do not have
to provide the Radius IP and Radius Key; they are automatically provided. If the option for the inter-
nal RADIUS server is enabled, configure user accounts on the AP via the Cluster > User Manage-
ment tab. For more information, see Chapter 7: “Managing User Accounts”.
• To use an external authentication server, ensue the checkbox beside the Use internal radius
server field is deselected. If you deselect this checkbox you must supply a Radius IP and Radius
Key of the server you want to use.
Note: The RADIUS server is identified by its IP address and UDP port numbers for the different
services it provides. On the current release of the 9160 G2 Wireless Gateway, the RADIUS
server User Datagram Protocol (UDP) ports used by the access point are not configurable.
(The 9160 G2 Wireless Gateway is hard-coded to use RADIUS server UDP port 1812 for
authentication and port 1813 for accounting.)
Radius IP
Enter the Radius IP in the textbox. The
Radius IP
is the IP address of the
RADIUS
server.
(The 9160 G2 Wireless Gateway internal authentication server is
127.0.0.1
.)
If you have an external RADIUS server on your network, we recommend using it rather than the using
the embedded RADIUS server on the AP. An external RADIUS server will provide better security than
the local authentication server.
For information on setting up user accounts, see Chapter 7: “Managing User Accounts”.
Radius Key
Enter the Radius Key in the textbox.
The
Radius Key
is the shared secret key for the RADIUS server. The text you enter will be displayed as “ * ”
characters to prevent others from seeing the RADIUS key as you type.
(The 9160 G2 Wireless Gateway internal authentication server key is
secret
.)
This value is never sent over the network.
Enable
RADIUS
Accounting
Click
Enable RADIUS Accounting
if you want to enforce authentication for
WPA
client stations with user
names and passwords for each station. See also Chapter 7: “Managing User Accounts”.
Table 10.9 WPA Enterprise Security Settings
Field Description
Comentarios a estos manuales