How to Configure a RADIUS/EAP Server for Wi-Fi Authentication

For large network environments, you can configure a RADIUS and EAP server to handle user authentication.

Configure RADIUS/EAP Wi-Fi Authentication

1. Go to  CONFIGURATION > Configuration Tr ee >  Box > Assigned Services > Wi-Fi > Wi-Fi AP Configuration .
2. In the left menu, select Radius/EAP.
3. Click Lock.

4. In the Primary RADIUS Server section, you can edit the following settings for the primary RADIUS server:

   Setting	Description
   NAS-IP Address	The service IP address of the Wi-Fi access point.
   Other NAS-IP	The alternative service IP address of the Wi-Fi access point.
   NAS-Identifier	The NAS identifier string for RADIUS messages. For example, the fully qualified domain name.
   Authentication Server IP	The IP address of the RADIUS authentication server.
   Authentication Port	The port address of the RADIUS authentication server.
   Authentication Password	The authentication password of the RADIUS authentication server. The password can consist of small and capital characters, numbers, and non alpha-numeric symbols, except the hash sign (#).
   Use Accounting	Enables RADIUS accounting.
   Accounting Server IP	The IP address of the RADIUS accounting server.
   Accounting Port	The IP port of the accounting server.
   Accounting Password	The password of the accounting server. The password can consist of small and capital characters, numbers, and non alpha-numeric symbols, except the hash sign (#).
   Accounting Update Interval[s]	The time interval in seconds for obtaining accounting updates. You can enter 60 to 600 seconds.

5. In the RADIUS Fallback Options section, you can edit the following settings for a secondary or fallback RADIUS server:

   Setting	Description
   Primary Retry Interval[s]	The interval in seconds for trying to return to using the primary RADIUS server.
   Secondary Radius Servers	The list of secondary or fallback RADIUS servers.

6. Click Send Changes and Activate.