RADIUS Options

This includes configuring parameters to balance response wait times and network performance, ensuring persistence in communication attempts, and maintaining preferred server connections.

• NAS ID: This ID is used by the RADIUS server to identify the controller or AP. By customizing the NAS ID, you can ensure that requests are routed and managed according to specific network policies and configurations.
• Delimiter: Make sure you use a delimiter that matches the supported delimiter in the RADIUS server.
• NAS Request Timeout: The duration the NAS waits for a response from the RADIUS server before timing out. A long timeout will increase the overall time to connect, which can be translated as a decrease in performance, but in slow networks with expected delays, it might be beneficial to ensure the RADIUS packets have enough time to reach their destinations.
• NAS Max Number of Retries: The maximum number of attempts the NAS will make to resend a request if no response is received. Adjusting the number of retries can help balance between network performance and reliability.
• NAS Reconnect Primary: A setting that determines whether the NAS should attempt to reconnect to the primary server after a failover to a secondary server. This helps maintain preferred network configurations and ensures that the primary server is used whenever possible. Enter the number of minutes after which the NAS will failback to the primary server.
• Called Station ID: This attribute is used by the RADIUS server to identify the specific access point or network device that received the connection request. By customizing the Called Station ID, you can ensure that requests are routed and managed according to specific network policies and configurations. This can be chosen among the following options:
  • WLAN BSSID: Uses the Basic Service Set Identifier of the WLAN, providing a unique identifier for the wireless network.
  • AP MAC: Uses the Media Access Control address of the Access Point, ensuring a unique identifier for the hardware.
  • None: Sets called-station-id and calling-station-id to empty.
  • AP Group: Uses the identifier of the group to which the Access Point belongs, allowing for group-based management.
  • AP Name: Uses the name assigned to the Access Point, providing a human-readable identifier.
• NAS IP: This option specifies the NAS IP address that SmartZone uses when proxying authentication and accounting requests to the AAA server. Configuring the NAS IP allows SmartZone to present a controller‑based NAS identity instead of the Access Point IP address.

  Select one of the following options:

  • Disable: The SmartZone forwards the NAS-IP-Address or NAS-IPv6-Address received from the AP without modification.
  • SZ Control IP: The SmartZone replaces the NAS IP attribute with the SmartZone Control IP address.
  • SZ Management IP: The SmartZone replaces the NAS IP attribute with the SmartZone Management IP address.
  • User Defined: The SmartZone inserts a manually configured IPv4 address into the NAS IP attribute. Enter a valid IPv4 address to save the configuration.
    Note: The User Defined option is only available when the zone is configured in IPv4 or dual mode.

  The NAS IP attributes included in RADIUS requests depend on the selected NAS IP option and the SmartZone deployment mode:

  • In an IPv4-only deployment, SmartZone includes only the NAS-IP-Address attribute.
  • In an IPv6-only deployment, SmartZone includes only the NAS-IPv6-Address attribute.
  • In a dual-mode deployment (both IPv4 and IPv6), SmartZone includes both NAS-IP-Address and NAS-IPv6-Address attributes.

  If the SmartZone supports a single IP version and the AP operates in dual mode (both IPv4 and IPv6), the SmartZone forwards only the NAS IP Attribute corresponding to the supported IP version.

  Note: Dynamic changes to the SmartZone control or management IP address are not reflected automatically in the NAS IP attributes. A service restart is required to apply the updated IP address.

  NAS IP Option

  
• Single Session ID Accounting: Enabling this feature allows the APs to maintain one accounting session for a client roaming between APs. If the client roams from one AP to another, the accounting session ID and statistics will be carried while roaming from one AP to the other. If the feature is not enabled, the accounting session ID is regenerated and statistics are also reset, essentially resetting the accounting.
• Vendor Specific Attribute Profile: A profile that includes attributes specific to a particular vendor. This allows for customization and extended functionality beyond standard attributes. Utilizing vendor-specific attributes can enhance the capabilities of your network devices and improve overall network performance.