User manual ZYXEL VANTAGE RADIUS 50 QUICK START GUIDE

[. . . ] See your User's Guide for more details on all features. 1. 1 Application Wireless clients connect to the WLAN in the same way you would access any authenticated wireless Access Point. The wireless AP provides authentication for user accounts via the Vantage RADIUS, which is invisible to the individual clients. 1 Vantage RADIUS 50 Quick Start Guide The following gives an overview of Vantage RADIUS' role in a network. · · · · · Wireless station A attempts to communicate with B over the wireless network via C. C sends a "request identity" message to A for authentication. [. . . ] Click LOGOUT in the navigation panel when you have finished managing your device. The device automatically logs you out if it is left idle for five minutes. If this occurs, refresh your browser to display the Login screen again and then log back in. Navigation panel LOGOUT RESTART/RESET 4. 1 Common Screen Command Buttons The following table shows common command buttons found on many web configurator screens. Apply Cancel Click this button to save your changes back to the RADIUS. Click this button to begin configuring this screen afresh. 5 Configuring Your RADIUS Server 5. 1 Network Configuration Wireless clients need to be in the same subnet as the Vantage RADIUS. Now configure your Vantage RADIUS to access the gateway or router that provides access to your network. Click ADVANCED and the IP in the main menu of the Web Configurator to set up network access for your RADIUS server. 7 Vantage RADIUS 50 Quick Start Guide The following table describes the fields in this screen. LABEL IP Address Netmask Gateway Primary DNS DESCRIPTION Type an IP address in dotted decimal notation. Type the IP address of the gateway or router used to connect your RADIUS to the network. DNS (Domain Name System) is for mapping a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it. The RADIUS uses a system DNS server (in the order you specify here) to resolve domain names. Type an IP address in dotted decimal notation if given to you by your ISP. Secondary DNS MAC Address Type a backup DNS Server IP address in dotted decimal notation if given to you by your ISP. This field displays the physical address of your RADIUS server on the network. 5. 2 Secure Connections Vantage Radius authenticates accounts using secure connections. This means that every time information is sent across the network, the connection must come from a valid source and all transmitted information is sent encrypted. Currently there are two supported authentication protocols on the Vantage RADIUS. 8 Vantage RADIUS 50 Quick Start Guide MD5 (Message-Digest Algorithm 5) MD5 authentication is the simplest one-way authentication method. The wireless station `proves' that it knows the password by encrypting the password with the challenge and sends back the information. Password is not sent in plain text. PEAP (Protected Extensible Authentication Protocol) Certificate authentication is used to establish a secure connection, then using simple username and password methods through the secured connection to authenticate the clients, thus hiding client identity. Certificates Certificates, also called digital Ids are used to authenticate network connections. A certificate contains the certificate owner's identity and public key. Certificates provide a way to exchange public keys for use in authentication. A Certification Authority (CA) issues certificates and guarantees the identity of each certificate owner. There are commercial certification authorities like CyberTrust or VeriSign and government certification authorities 5. 3 Trusted Root CA A trusted Root CA is a special kind of certificate that does not require a CA to guarantee identification. [. . . ] Use this drop-down list box to select the order the wireless AP checks the databases to authenticate a wireless station. 15 Vantage RADIUS 50 Quick Start Guide 1. Select Authentication Required so that all wireless stations have to enter usernames and passwords before access to the wired network is allowed. 2. If your AP uses MD5 authentication, then Dynamic WEP Key Exchange must be disabled as MD5 uses static keys. Select the order of databases your wireless AP checks for a username and password. 16 Vantage RADIUS 50 Quick Start Guide 7 Troubleshooting PROBLEM None of the LEDs turn on when you turn on the device. CORRECTIVE ACTION Make sure that you have the correct power adaptor connected to the device and plugged in to an appropriate power source. [. . . ]