| Seiteneigenschaften |
|---|
Description:
Requirements:
- LCOS as of version 9.24 or 10.30 if LCOS SX as of 3.32 RU7 is used (download latest version)
- LANtools as of version 9.24 (download latest version)
- Switch firmware as of version 3.17 (download latest version)
- Any web browser for accessing the webinterface of the GS-23xx switch
Procedure:
1.1) Open the configuration of the router in LANconfig, go to the menu RADIUS → Server and set the checkmark next to RADIUS authentication active .
- IP address: Enter the IP address of the switch, so that it can authenticate itself with the RADIUS server as RADIUS authenticator.
- Netmask: Enter the netmask 255.255.255.255. This netmask represents a single IP address.
- Protocols: Make sure, that the protocol RADIUS is selected.
- Client secret: Enter a password, the switch uses for authentication with the RADIUS-Server. In step 2.1 this is entered in the switch configuration.
- Name / MAC address: Enter the MAC address of a network device which is to be authenticated in the format 00-a0-57-12-34-56.
- The option Case sensitive username check has to be deactivated.
- Password: Enter the MAC address of a network device which is to be authenticated (see Name / MAC address).
- Service type: In the dropdown menu select the option Framed.
- Expiry type: In the dropdown menu select the option Never, so that the user account will never expire.
| Info |
|---|
As of LCOS SX 3.32 RU7 the switch sends a RADIUS request with the Service type Call check if MAC-based Auth is used. In this case the Service type has to be set to Call check. As an alternative the option Any can also be used. The Service type Call check is only supported as of LCOS 10.30. |
2.1) Open the webinterface of the device, go to the menu Security → AAA → Configuration, modify the following parameters in the RADIUS Authentication Server Configuration and click Apply:
- Set the checkbox for Enabled.
- IP Address/Hostname: Enter the IP address of the router where the RADIUS server was configured in step 1).
- Port: Make sure, that the port 1812 is used.
- Secret: Enter the Client secret entered in step 1.5). The switch uses this password for authenticating itself with the RADIUS server.
- Mode: In the dropdown menu select the option Enabled.
- Port Configuration: Select a port the network device to be authenticated is connected to, and for the Admin State select the option MAC-based Auth..
...
| Info |
|---|
The start configuration is retained even if the device is restarted or there is a power failure. |
2.4) This concludes the configuration of the switch.
...
| Forms | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||||||
Thank you for your feedback! You can also send us constructive suggestions for improving our knowledge base or ideas for new articles by email to knoweldgebase@lancom.de. |