ImRAD RADIUS - Revision history

Shin at 07:11, 7 March 2025

2025-03-07T07:11:18Z

Shin: /* Captive Portal */

2023-11-08T07:22:07Z

Captive Portal

Shin at 07:21, 8 November 2023

2023-11-08T07:21:47Z

Shin at 06:23, 17 October 2023

2023-10-17T06:23:49Z

Shin at 06:30, 4 September 2023

2023-09-04T06:30:46Z

Shin: /* General */

2023-08-09T06:10:56Z

General

Shin at 06:09, 9 August 2023

2023-08-09T06:09:10Z

Shin at 06:02, 9 August 2023

2023-08-09T06:02:26Z

Shin at 05:55, 9 August 2023

2023-08-09T05:55:46Z

Shin at 04:34, 9 August 2023

2023-08-09T04:34:46Z

@@ Line 47: / Line 47: @@
 === Configuring RADIUS ===
 ===== Getting started =====
-Basically, to authenticate a user's device basically that is in the 802.1x environment, Follow the below instruction.
+Basically, to authenticate a user's device that is in the 802.1x environment, Follow the below instruction.
-# Register the IP address of an imRAD and the shared secret at a [[NAS]].
+# Register the IP address of an imRAD N1 and the shared secret at a [[NAS]].
 # Register the IP address of a [[NAS]] and the same shared secret at the [[NAS setting | RADIUS > settings > NAS]] .

@@ Line 93: / Line 93: @@
 It manages automatically collected NAS-ID (SSID).
-======&nbsp;&nbsp;[[Captive Portal]]======
+======&nbsp;&nbsp;[[Captive portal]]======
 This is an interface that allows you to create pages for wireless LAN usage instructions and wireless LAN user registration when using Captive Portal.<ref>https://en.wikipedia.org/wiki/Captive_portal</ref>

@@ Line 93: / Line 93: @@
 It manages automatically collected NAS-ID (SSID).
-======&nbsp;&nbsp;[[Guest Page]]======
+======&nbsp;&nbsp;[[Captive Portal]]======
 ======&nbsp;&nbsp;[[RADIUS Authentication testing]]======

@@ Line 92: / Line 92: @@
 ======&nbsp;&nbsp;[[NAS Identifier|NAS-ID]]======
 It manages automatically collected NAS-ID (SSID).
 ======&nbsp;&nbsp;[[RADIUS Authentication testing]]======

@@ Line 60: / Line 60: @@
 ===== [[Reject2ban]] =====
 It is designed to reduce the load on the databases from random requests of a malicious client.
 ===== [[RADIUS Groups|Groups]]=====

@@ Line 80: / Line 80: @@
 ======&nbsp;&nbsp;[[RADIUS Settings - General | General]]======
-You can configure Data Maintenance, Password policy for RADIUS User, EAP, RADIUS general configuration, and Reject2ban.
+You can configure Data Maintenance, Password complexity for RADIUS User-Password, EAP, RADIUS general configuration, and Reject2ban.
 ======&nbsp;&nbsp;[[NAS setting | NAS]]======

@@ Line 29: / Line 29: @@
 * Microsoft Active Directory Lightweight directory service(AD LDS)
-'''[[Authentication DB | Using an external Database]]''' makes it possible to authenticate directly a user through it(e.g, Customer employee database) without importing data from the remote database to the imRAD local database.<br>
+Using an '''[[Authentication DB | external Database]]''' makes it possible to authenticate directly a user through it(e.g, Customer employee database) without importing data from the remote database to the imRAD local database.<br>
-In the environment of using '''[[Authentication DB | an external Database]]''' for user authentication, it may increase network traffic to the external database and slow down the database.<br>
+In the environment of user authentication via an '''[[Authentication DB | external Database]]''', it may increase network traffic to the external database and slow down the database.<br>
 To resolve this, the user credentials that were authenticated from an external database are saved into the local database for few days(You can set how many days the cached users are kept in the local database from the [[RADIUS Settings - General | RADIUS general settings]]). And then, authentication requests will not be sent to the external database but be completed in the local database. We called it "cached user".<br>
 To securely save the User-password into the local database, it is saved as hashed data using the strong hash algorithm(e.g, SHA256 with salt).<br>
@@ Line 43: / Line 43: @@
 A famous proxying is eduroam(education roaming)<ref>https://www.eduroam.org/what-is-eduroam/</ref> and a user can be authenticated at an eduroam server using the RADIUS Proxying.
-The [[Pass-Through Authentication]] and the RADIUS Proxying can be restricted by a NAS Identifier and you can also set this policy.
+An [[Authentication DB | external database]] authentication and a RADIUS Proxying can be restricted by a NAS Identifier(NAS-ID) and you can also set this policy on RADIUS> Settings> [[Authentication DB]] or [[Realm and proxy|Realms/Proxys]] menu.
 === Configuring RADIUS ===
@@ Line 88: / Line 88: @@
 It manages Proxy servers and Realm for the Proxy Authentication.
-======&nbsp;&nbsp;[[Authentication Database]]======
+======&nbsp;&nbsp;[[Authentication DB]]======
 Configure local or external database connection attributes for user authentication.

@@ Line 83: / Line 83: @@
 ======&nbsp;&nbsp;[[NAS setting | NAS]]======
 ======&nbsp;&nbsp;[[Realm and proxy|Realm/Proxy]]======
-======&nbsp;&nbsp;[[Pass-Through Authentication]]======
+It manages Proxy servers and Realm for the Proxy Authentication.
 ======&nbsp;&nbsp;[[LDAP]]======
 ======&nbsp;&nbsp;[[NAS Identifier|NAS-ID]]======
 ======&nbsp;&nbsp;[[RADIUS Authentication testing]]======
 === References ===