Configure a RADIUS Server for Captive Portal Authentication
Configure a RADIUS Server with Web UI for Captive Portal Authentication
You can, for authentication purposes, set up the identity and secret for the RADIUS server. This takes precedence over any configured User IDs but if RADIUS accounting fails over, the local authentication guest user IDs are used. To do this, follow these steps:
- Click Configuration > Security > RADIUS to access the RADIUS Profile Table.
- Click Add.
- Provide the RADIUS server information.
- Save the configuration by clicking OK.
- Enable a security profile for use with a Captive Portal login page by clicking Configuration > Security > RADIUS > Add.
- Provide the required information, such as the name of the RADIUS profile. L2MODE must be clear to use Captive Portal. Set the Captive Portal to WebAuth and adjust any other parameters as required.
The identity and secret are now configured.
Configure a RADIUS Server with CLI for Captive Portal Authentication
The CLI command ssl-server captive-portal authentication-type configures the controller to use either local authentication, RADIUS authentication, or both. If both is selected, local authentication is tried first; if that doesn’t work, RADIUS authentication is attempted.
Controller(config)# ssl‐server captive‐portal authentication‐type ? local Set Authentication Type to local. local‐radius Set Authentication Type to Local and RADIUS. radius Set Authentication Type to RADIUS.
The following example configures an authentication RADIUS profile named radius-auth-pri.
/* RADIUS PROFILE FOR AUTHENTICATION */ default# configure terminal
default(config)# radius‐profile radius‐auth‐pri default(config‐radius)# ip‐address 172.27.172.3 default(config‐radius)# key sept20002 default(config‐radius)# mac‐delimiter hyphen default(config‐radius)# password‐type shared‐secret default(config‐radius)# port 1812 default(config‐radius)# end
Configure a RADIUS Server for Captive Portal Authentication
default#
default# sh radius‐profile radius‐auth‐pri
RADIUS Profile Table
RADIUS Profile Name : radius‐auth‐pri
Description :
RADIUS IP : 172.27.172.3
RADIUS Secret : *****
RADIUS Port : 1812
MAC Address Delimiter : hyphen
Password Type : shared‐secret
The following example configures a security RADIUS profile named radius-auth-sec.
default# configure terminal default(config)# radius‐profile radius‐auth‐sec default(config‐radius)# ip‐address 172.27.172.4 default(config‐radius)# key sept20002 default(config‐radius)# mac‐delimiter hyphen default(config‐radius)# password‐type shared‐secret default(config‐radius)# port 1812 default(config‐radius)# end default#
default# sh radius‐profile radius‐auth‐sec
RADIUS Profile Table
RADIUS Profile Name : radius‐auth‐pri
Description :
RADIUS IP : 172.27.172.4
RADIUS Secret : *****
RADIUS Port : 1812
MAC Address Delimiter : hyphen Password Type : shared‐secret