This article explains how and why Dynamic Radius Proxy is used on Dell Networking Wireless Instant Access Points.
This command is used to point the authentication communication to the IP address of the Virtual Controller. This reduces the amount of configuration needed on the Radius Server. If Dynamic Radius Proxy is not used the Radius Server would have to have a reference to all the Instant Access Points in your environment individually.
In order to fully configure you will need to set up your WLAN SSID to have Enterprise level security. This can be set up in the initial WLAN wizard or later by editing the WLAN configuration under the Security tab. Slide the security level to Enterprise. Enable the authentication type. Choose the server name where your dynamic RADIUS proxy parameters are enabled. If your RADIUS server is not listed you can create a new server.
| Command |
Purpose |
| IAP(config)# dynamic-radius-proxy |
Enables dynamic Radius proxy feature to allow the Virtual Controller network to use the IP address of the Virtual Controller when communicating with the external Radius servers. |
| IAP(config)# no dynamic-radius-proxy |
Removes the dynamic radius proxy configuration. |
The following example enables the dynamic RADIUS proxy feature:
(Instant Access Point)(config)# dynamic-radius-proxy
(Instant Access Point)(config)# end
(Instant Access Point)# commit apply
To enable RADIUS server support:
In the Instant main window, click the System link. The System window appears.
In the General tab of System window, select window, select Enabled from the Dynamic Radius Proxy drop-down list.
Click OK.
You can configure Dynamic RADIUS Proxy parameters for the authentication server in the GUI:
Click the Security>Authentication Servers.
To create a new server, click New and configure the required RADIUS server parameters.
Ensure that the following RADIUS proxy parameters configured:
DRP IP - IP address to be used as source IP for RADIUS packets.
DRP Mask - Subnet mask of the DRP IP address.
DRP VLAN - VLAN in which the RADIUS packets are sent.
DRP Gateway - Gateway IP address of the DRP VLAN.
Click OK.