RADIUS Users

RADIUS > Users

You can add, update, or delete the usernames for the RADIUS authentication.

Create New User

You can add a new user at the top right of the page and can create a user as either a Username authentication or a MAC Address authentication. The Username authentication stores a User-Name and User-Password and the credentials are validated with the two attributes to authenticate an ACCESS-REQUEST.
The MAC address authentication store a MAC address of a user machine and the credentials are validated with the address. The MAC address type is applied usually in the environment of an open wireless network.

Username / MAC Authentication

style='width:150px'	Item	Required	Description
Username	Yes	The multibyte characters(e.g, korean, japaneses) are not allowed.
Status	Yes	Select "authorized"
Password Type	Yes	It is the encryption method of a password. If a user machine is windows 10, the type must be either the Windows NT hashed passwords or clear-text passwords.
Password Confirm Password	Yes	Input the password of a username.
Expiration	No	Set the user authentication expiration date.
User Information	Optional	You can fill out the general user informations. The requirement of this field depends on "Environment > Custom Fields".
Group	No	A group to which the user.
Additional Attributes	No	You can add more attributes for authentication or reply. You don't need to add additional attributes at this step because they can be added after creating a user.

MAC Address Authentication

Item	Required	Description
MAC Address	Yes	The MAC Address of a user machine. The address is case-sensitive and also may include delimiters and you can find the format of the MAC address from the Accounting.
Expiration	No	Set the user authentication expiration date.
Others are same as the Username Authentication.

User Authorization, Updating, and Deleting

A username that was registered from the captive portal page will be added as an un-authorized one. You can authorize it by click the icon in front of each row. Within the same interface, you can also change other information and delete a user.

Additional Attributes

Authentication Attributes

Authentication attributes are pieces of information used in RADIUS authentication in addition to the basic information (User-Name, User-Password). For useful authentication attributes, refer to the Attributes section.

Reply Attributes

Reply attributes refer to the attributes provided to the user after RADIUS authentication. For useful reply attributes, refer to the Attributes section.

Password Reset

You can reset the password of registered users.

When a user's password is reset, the previous password becomes unusable, and a temporary password is issued. The use of such temporary passwords and the password reset feature can be configured in RADIUS > Settings > General > Password Complexity Requirements for RADIUS User-Password. If the password reset feature is inactive (default state), users cannot use the password reset function.

When a password is reset, the user must create a new password using the temporary password on the password change page. For more details, refer to RADIUS > Settings > General > Password Complexity Requirements for RADIUS User-Password.

Passwords for users authenticated based on MAC address or stored in an external database as " cached user" cannot be reset.

Expiration

Users with a specified expiration time that has passed will not be granted authentication (Access-Reject), and this information will not be automatically deleted."