cancel
Showing results for 
Search instead for 
Did you mean: 

Radius Proxy on cnMaestro

Moderator

Radius Proxy on cnMaestro

Radius Proxy on cnMaestro

 

cnMaestro can act as proxy server to authentication requests coming from cambium AP. In this scenario, cnMaestro will act as NAS for radius server. In below scenario, access point send radius packets to cnMaestro & cnMaestro forwards to radius server. It can act as proxy for either authentication or accounting messages

Note: this works for on-premises version of cnMaestro

 

rad0.png

 

 

Radius Proxy Configuration

Steps to configure Radius proxy on cnMaestro:

  1. Go to Configure>WLAN and AP GROUPS >WLANs> select WLAN profile >EDIT>RADIUS Server
  2. Enable Check box “Proxy RADIUS through cnMaestro:”
  3. Configure Authentication Server details
  4. Configure Accounting Server details
  5. Configuration in NAS-Identifier, it include NAS-Identifier attribute for use in Radius Request packets & Default to system name
  6. Push the configuration from cnMaestro To AP 

Note:    a). this feature is available from 1.4.1-b1 build on cnMeastro.

             b). support ap Software Version 3.3 beta version on cnPilot

 

 

 rad1.png

 

 

 

 

rad2.png

Radius Frames

Below Wireshark packets capture shows cnMaestro’s IP as NAS IP & NAS-Identifier as per configuration in WLAN radius profile. In this capture, 10.110.219.51 is IP address of cnMaestro. Radius server’s IP address is 10.110.32.96

 

 

 fram1.png

 

 

 fram2.png

 

 

fram3.png