Clarinet Systems ES608 Supplementary Manual

Download Manual  of Clarinet Systems ES608 Network Card, Wireless Access Point for Free or View it Online on All-Guides.com. This version of Clarinet Systems ES608 Manual compatible with such list of devices, as: ESB1000, ESB101, ESB208, ESB5001, ESB5004

Clarinet Systems ES608 Manual  - Page 1
1
Clarinet Systems ES608 Manual  - Page 2
2
Clarinet Systems ES608 Manual  - Page 3
3
Clarinet Systems ES608 Manual  - Page 4
4
Clarinet Systems ES608 Manual  - Page 5
5
Clarinet Systems ES608 Manual  - Page 6
6
Clarinet Systems ES608 Manual  - Page 7
7
Clarinet Systems ES608 Manual  - Page 8
8
Clarinet Systems ES608 Manual  - Page 9
9
Clarinet Systems, Inc. copyright 10/29/02 p1
Clarinet Systems RADIUS Technical Information
Introduction
This document describes the RADIUS support in the Clarinet Systems’ EthIR LAN product line.
It also includes the configuration of EthIR LAN, RADIUS server, PalmOS and PocketPC devices.
This document is intended for IT professionals who setup and maintain networking devices and
infrastructure in a corporate environment. Knowledge of TCP/IP, Windows networking
environment and server setup are required.
EthIR LAN R RADIUS implementation supports MS-CHAP, CHAP and PAP authentication
protocols. Each protocol can be enabled and disabled, via our Windows Configuration tool, according
to the settings of your RADIUS server. For example, if your RADIUS server does not support MS-
CHAP, you should disable MS-CHAP in the EthIR LAN configuration. If your PDA device does not
support CHAP and only support PAP, you should enable PAP and disable MS-CHAP and CHAP.
Usually there are domain names in Windows NT environment. For Windows RADIUS server, NT
domain name is required. EthIR LAN can be configured with the NT domain name so that PDAs
that do not support NT domain name can access the network.
The RADIUS server has the option of assigning an IP address to the PDA. Radius server assigned
IP address takes precedence over DHCP and static IP. This helps network admin monitoring who is
on the network via IP address
RADIUS accounting can be enabled and disabled. If it is disabled, EthIR LAN does not send out
accounting requests and wait for server response so that connection time and be shorter.
Two RADIUS servers, primary and secondary are supported. EthIR LAN sends requests to
primary server and wait for responses. If there is no response after retries, requests will be sent to
secondary server. Both servers share the same secret.
EthIR LAN RADIUS support is controlled by “key” stored in the EthIR LAN firmware. You can use
our Windows Configuration Tool to tell if an EthIR LAN has the RADUIS support option. If it
does, a RADIUS tab will be displayed (see EthIR LAN RADIUS Configuration section).
Supported Features
EthIR LAN supports RFC2865 “Remote Authentication Dial In User Service” and RFC2866
“RADIUS Accounting” with the following packet types and attributes:
RFC2865 --
Remote Authentication Dial In User Service (RADIUS)
1. Supported Packet Types
Packet Type Comment
Access-Request EthIR LAN ! RADIUS server; authentication request
Access-Reject EthIR LAN " RADIUS server; authentication failed
Access-Accept EthIR LAN " RADIUS server; authentication passed