6 Replies Latest reply: Apr 23, 2012 9:08 AM by ggirao
ggirao Level 1 Level 1 (0 points)

Hello all,

 

I Want to setup a Radius on my network, but for start I dont want to "block" people that aren't authenticated. Is it possible?

  • 1. Re: Setting up Radius
    MrHoffman Level 6 Level 6 (12,455 points)

    It's common to set up parallel WiFi networks for that general purpose; a secure network and a so-called guest network.  The "guest" network allows external access, but no or limited access to the internal (secured) networks.

     

    An alternative that some folks use involves a generic account that's available to all, though that lacks accountability, and the password can become stale.

     

    Implementation details can vary here, too; on whatever network device(s) are requesting the RADIUS authentication.

     

    What RADIUS client devices are you using?

  • 2. Re: Setting up Radius
    ggirao Level 1 Level 1 (0 points)

    I Will install new air ports (extreme) on my network very soon. But my intention is to make tests first, probably on an old airport.

  • 3. Re: Setting up Radius
    MrHoffman Level 6 Level 6 (12,455 points)

    When I'm setting these up, I'll use different SSIDs for the two networks, and will wire the guest network to the gateway-firewall-NAT box from the DMZ.  (This means that the gateway-firewall-NAT box has a DMZ capability.) 

     

    Some of the newer Airport and other WiFi devices have built-in guest network capabilities, though there can sometimes be limits around where they're getting DNS from; IIRC, the Airport devices expect the same DNS server for both networks.

  • 4. Re: Setting up Radius
    ggirao Level 1 Level 1 (0 points)

    I'm getting The server reported the error: 'INVALID_ARG_ERR' while processing a command of type: 'getSSID' when adding new airports. Someone said that could be LACP (I'm using on this server).

  • 5. Re: Setting up Radius
    MrHoffman Level 6 Level 6 (12,455 points)

    I haven't seen that error; what's the SSID and RADIUS configuration?  Check the RADIUS logs in the server, too.

  • 6. Re: Setting up Radius
    ggirao Level 1 Level 1 (0 points)

    I'm still configuring the radius, not even finished. It's when I add the airport.