Can't find what you need?


• Ask the Community
• Create a Case
Reset Search
 

 

Article

The difference between Radius Server Config on the VNS , Global Authentication page and strict mode

« Go Back

Information

 
TitleThe difference between Radius Server Config on the VNS , Global Authentication page and strict mode
Question
  • Which of the Radius Settings on different pages in the Wireless Controller has precedence over the other settings
  • Strict mode
Environment
  • IdentiFi Wireless 
  • Software/Firmware version 9.x - 10.x
  • RADIUS Server
Answer
  • In WLAN Service of Controller 1 first position Radius is 1 second is
           In WLAN Service of Controller 2 first position Radius is 2 second is 1.”  
 
  • Unless your customer runs his controllers in “Strict Mode” you can ignore the priority settings for the RADIUS servers on the Authentication page. Instead use RADIUS Server list on the “Auth & Acct” tab of each WLAN Service requiring RADIUS to set the priority of the servers. Just use the “Use” button to add the servers to the list in the order you want them used. The one at the top of the list is the primary server and the others are fallback servers tried in the order they are listed. If the RADIUS servers are listed in the wrong order, select one of the RADIUS servers and click the “Move Up” or “Move Down” button as appropriate.When the list is ordered the way you want, save the WLAN Service. Repeat with the other deployed WLAN Services on both controllers.
 
  • If the customer does use “Strict mode” use the RADIUS server list on the Global Authentication page of the VNS Configuration module to set the priority of the server.
  • Assuming the RADIUS servers are already added to the global list just edit the definition.
             1.       Click on the name of the primary server. The RADIUS Server configuration dialog box opens
             2.       In the “Authentication” section of the dialog box, set the value of the Priority field to 1.
                       This makes the server the  primary RADIUS Server for authentication.
             3.       Save the change
             4.       Click on the name of the secondary server. The RADIUS Server configuration dialog box opens
             5.       In the “Authentication” section of the dialog box, set the value of the Priority field to any number
                        greater than 1 (e.g. 2).  This makes the RADIUS server the secondary authentication server.
             6.       Save the change.
                       Follow the same procedure on the other controller, but reverse the priorities of the two servers.
 
  • Please note the procedure described in the last paragraph only works when strict mode is enabled.
           Strict mode forces all the WLAN Services on the EWC to use the same RADIUS server settings,
           as shown on the Global Authentication page.
Additional notes

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255