Cambium Networks 50450M 5 GHz Point to Multipoint User MIMO Accesspoint User Manual 450 Platform User Guide说明书用户手册.pdf

Chapter 7: Configuration Configuring a RADIUS server Microsoft RADIUS support This feature allows to configure Microsoft RADIUS (Network Policy and Access Services a.k.a NPS) as Authentication server for SM and User authentication.  For SM Authentication, SM will user PEAP-MSCHAPv2 since NPS doesnt support TTLS protocol.  For User Authentication, the Canopy software will use EAP-MD5 but the user has to do certain configuration in order to enable EAP-MD5 on NPS. Note All this configuration has been tested on Windows Server 2012 R2 version. This feature is not supported on hardware board type P9 or lower platforms. SM Authentication Configuration There are no new configuration on AP. However SM has to be configured for PEAP authentication protocol. 1. Go to Configuration Security page 2. Select “eappeap” for Phase 1 attribute under tab AAA Authentication Settings. Figure 139 EAPPEAP settings The Phase 2 will change automatically to MSCHAPv2 on select of Phase 1 attribute as EAP-PEAP. Other parameters of Phase 2 protocols like PAP/CHAP will be disabled. Import Certificate The SM certificate has to be imported to Windows Server for certificate authentication. 1. Copy the certificate which is configured in SM under Configuration Security - Certificate1 to Windows Server machine. 2. Right click and select Install Certificate. This will install the certificate and its ready for use. This certificate will be used while configuring PEAP-MSCHAPv2 in NPS. 308 Chapter 7: Configuration Configuring a RADIUS server NPS Configuration (/en-us/network/bb545879.aspx) Following items should be configured in NPS Console:  RADIUS Client o /en-us/library/cc732929  Connection Request Policies