Setup 802.1x PEAP wireless authentication on Funk Odyssey and Vantage Radius



Introduction

Vantage Radius provide to perform real time transactions  of the Radius server such as administrator login, the Radius server authenticate request, the Radius accounting request, authenticate reply and accounting reply. 

Wireless connect to the WLAN in the same way you would access an authenticated wireless Access Point (AP). The wireless AP provide authentication for user accounts via Vantage Radius, which is invisible to the individual clients.

Client usernames and passwords are forwarded from a wireless network to Vantage Radius, which then validate them against its own list. This ensure that only individuals with valid account will be granted network access.

Here comes an example for setting up 802.1x PEAP wireless authentication on Funk Odyssey station via AP to the Vantage Radius.

1. Operation System: Windows 2000(SP4) and ZyAIR G-100 + Funk Odyssey software

2. Access Point: ZyAIR B1000v2

3. Radius: Vantage Radius




Setting up the Vantage Radius

1. After we login the the Vantage Radius Web configurator, Click RADIUS, select RADIUS SERVER.

2. Type the Authentication Port (default 1812).

3. Type the Share Key for Vantage Radius and Access Point (ZyAIR B-1000v2) 


4. Click USER ACCOUNT, then, click Add New User button to create a user account.

 

5. Type User Name and Password, click Apply to exit.

 


Setting up the Access Point

1. Connect to the Access point's console or telnet to the Access Point. (The default IP address of ZyAIR B1000v2 is 192.168.1.2)

2. Get into SMT menu 3.5, configure the ESSID of your AP.

 

3. Get into SMT menu 23.4 - System Security.

4. Configure the Wireless Port Protocol as Authentication Required.

5. Select the Key Management Protocol as 802.1x.

6. Select Authentication Database as RADIUS only.

7. Get into SMT menu 23.2 - System Security - RADIUS Server

Configure the Authentication Server:

Active =Yes

Server Address= 192.168.1.3

Port= 1812

Shared Key=XXXX (as you configured in Vantage Radius)

 


Setting up the Station

A. Install Root Certificate in you laptop

1. Get into Vantage Radius Web Browser > RADIUS > ROOT CA

2. Click Download Root CA Certificate, download the Root CA to your local PC.

3. After you downloaded the Root CA, click Install Certificate to nstall.

4. Click Next.

5. Click Next.

6. Click Finish to complete the installation.

7. Click Yes to add the CA to the root store.

8. Click OK.

 

B. Configuring your 

 

1. Install G-100 and Odyssey client for ZyXEL.

2. Get into Odyssey Client > Adapter, Click Add to select the Wireless Adapter

 

3. Click OK.

4. Select Profile, click Add to create a new wireless authentication profile.

5. Type the Profile name as you want.

6. Select User Info tab, fill in the Login name and Password.

7. Click Authentication tab. Click Add button to select Authentication Protocol PEAP/EAP.

8. Click PEAP Settings tab, select EAP/MS-CHAP-V2 inner EAP-PEAP protocol.

9. Choose Networks, click Add to create a wireless network profile.

10. Type the Network name(SSID), Network type as Access Point (Infrastructure mode) and Authenticate using profile as you configured.

10. Click OK.

11. Select Connection, choose the Network profile you just configured.


All contents copyright © 2004 ZyXEL Communications Corporation.