RADIUS Options

Optimize connectivity times in WLANs with RADIUS authentication by adjusting the RADIUS settings.

This includes configuring parameters to balance response wait times and network performance, ensuring persistence in communication attempts, and maintaining preferred server connections.

  • NAS ID: This ID is used by the RADIUS server to identify the controller or AP. By customizing the NAS ID, you can ensure that requests are routed and managed according to specific network policies and configurations.
  • Delimiter: Make sure you use a delimiter that matches the supported delimiter in the RADIUS server.
  • NAS Request Timeout: The duration the NAS waits for a response from the RADIUS server before timing out. A long timeout will increase the overall time to connect, which can be translated as a decrease in performance, but in slow networks with expected delays, it might be beneficial to ensure the RADIUS packets have enough time to reach their destinations.
  • NAS Max Number of Retries: The maximum number of attempts the NAS will make to resend a request if no response is received. Adjusting the number of retries can help balance between network performance and reliability.
  • NAS Reconnect Primary: A setting that determines whether the NAS should attempt to reconnect to the primary server after a failover to a secondary server. This helps maintain preferred network configurations and ensures that the primary server is used whenever possible. Enter the number of minutes after which the NAS will failback to the primary server.
  • Called Station ID: This attribute is used by the RADIUS server to identify the specific access point or network device that received the connection request. By customizing the Called Station ID, you can ensure that requests are routed and managed according to specific network policies and configurations. This can be chosen among the following options:
    • WLAN BSSID: Uses the Basic Service Set Identifier of the WLAN, providing a unique identifier for the wireless network.
    • AP MAC: Uses the Media Access Control address of the Access Point, ensuring a unique identifier for the hardware.
    • None: Sets called-station-id and calling-station-id to empty.
    • AP Group: Uses the identifier of the group to which the Access Point belongs, allowing for group-based management.
    • AP Name: Uses the name assigned to the Access Point, providing a human-readable identifier.
  • Single Session ID Accounting: Enabling this feature allows the APs to maintain one accounting session for a client roaming between APs. If the client roams from one AP to another, the accounting session ID and statistics will be carried while roaming from one AP to the other. If the feature is not enabled, the accounting session ID is regenerated and statistics are also reset, essentially resetting the accounting.
  • Vendor Specific Attribute Profile: A profile that includes attributes specific to a particular vendor. This allows for customization and extended functionality beyond standard attributes. Utilizing vendor-specific attributes can enhance the capabilities of your network devices and improve overall network performance.