How to Configure 802.1x to Secure the Wireless Environment with an Internal RADIUS in NXC?
The example instructs how to set up NXC controller and let users do local authentication without external radius server. The user data base is set up in the NXC controller and the client can enter the username and password to do authentication via 802.1x.
4.4.1 Configure Authentication Method Setting
1 Go to CONFIGURATION > Object > User/Group, and click add to create a new user ID and password. Stations can log in to connect with the AP to access the Internet via this account.
2 Go to CONFIGURATION > Object > Auth. Method, and click add to create an authentication method. Enter the Name of this authentication method and select to local in the Method List.
3 Go to CONFIGURATION > System > Auth. Server, and set Authentication Method to localtest which is created in step 2.
4.4.2 Configure AP Profile
1 Configure the AP profile to use 802.1x authentication that user needs to log in with their ID and Password when connecting to the AP’s SSID. Go to CONFIGURATION > Object > AP Profile > SSID > Security List, and click Add to add security for 802.1x.
In General Settings, enter the Profile Name and change Security Mode to wpa2.
In Radius Settings, select to Internal and it means the authentication needs NXC to communicate with external LDAP server.
In Authentication Settings, select 802.1x and Auth. Method is localtest. Click OK.
2 Go to CONFIGURATION > Object > AP Profile > SSID > SSID List, click add to add a SSID for the connection with 802.1x security. Key in the Profile Name and SSID, and change Security Profile to local802 which is created in step1. Click OK to save.
3 Go to CONFIGURATION > Wireless > AP Management > AP Group, select the default AP profile and edit. Select local802 in the SSID Profile. Click Override Member AP Setting to apply the SSID to the AP and click Yes in the pop-up window. Click OK.
4.4.3 Test the Result
1 Before connecting the SSID, the computer needs to do some settings to make the connection successfully. Here is an example for Windows 7.
Opening Network and Sharing Center in computer, click Set up a new connection or network to build up a new network.
2 Select Manually connect to a wireless network. Click Next.
3 Key in the SSID to Network name and change the Security type to WAP2-Enterprise, and the Encryption type is AES. Click Next.
4 Select Change connection settings.
5 Select Security type to WPA2-Enterprise, and Encryption type is AES. Click Settings.
6 Uncheck Validate server certificate and click Configure.
7 Uncheck the selection of pop-up window. Click OK.
8 Go back to the security setting page and click Advanced settings.
9 Check Specify authentication mode. Click OK to save.
10 Select and connect to the pre-defined SSID "ADTest". Enter user credentials for authentication. After entering the correct ID and password, the wireless connection is set up successfully.
- All Categories
- 300 Beta Program
- 1.9K Nebula
- 102 Nebula Ideas
- 72 Nebula Status and Incidents
- 4.8K Security
- 3 USG FLEX H Series
- 242 Security Ideas
- 1.1K Switch
- 54 Switch Ideas
- 807 WirelessLAN
- 29 WLAN Ideas
- 5.5K Consumer Product
- 178 Service & License
- 309 News and Release
- 122 Success Stories
- 69 Security Advisories
- 19 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.3K FAQ
- 554 Nebula FAQ
- 343 Security FAQ
- 118 Switch FAQ
- 146 WirelessLAN FAQ
- 31 Consumer Product FAQ
- 110 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 70 About Community
- 56 Security Highlight