Radius Proxy on cnMaestro
cnMaestro can act as proxy server to authentication requests coming from cambium AP. In this scenario, cnMaestro will act as NAS for radius server. In below scenario, access point send radius packets to cnMaestro & cnMaestro forwards to radius server. It can act as proxy for either authentication or accounting messages
Note: this works for on-premises version of cnMaestro
Radius Proxy Configuration
Steps to configure Radius proxy on cnMaestro:
- Go to Configure>WLAN and AP GROUPS >WLANs> select WLAN profile >EDIT>RADIUS Server
- Enable Check box “Proxy RADIUS through cnMaestro:”
- Configure Authentication Server details
- Configure Accounting Server details
- Configuration in NAS-Identifier, it include NAS-Identifier attribute for use in Radius Request packets & Default to system name
- Push the configuration from cnMaestro To AP
Note: a). this feature is available from 1.4.1-b1 build on cnMeastro.
b). support ap Software Version 3.3 beta version on cnPilot
Radius Frames
Below Wireshark packets capture shows cnMaestro’s IP as NAS IP & NAS-Identifier as per configuration in WLAN radius profile. In this capture, 10.110.219.51 is IP address of cnMaestro. Radius server’s IP address is 10.110.32.96