• SonicOS8
• About Access Points
• Settings
  • Synchronize Access Points
  • Provisioning Overview
  • Creating/Modifying Provisioning Profiles
    • Adding/Editing a Provisioning Profile - Getting Started
    • General Settings for Provisioning Profiles
    • 5GHz/2.4GHz Radio Basic Settings for Provisioning Profiles
      • Radio Settings
      • Wireless Security
      • Protected Management Frames (PMF Option)
      • About Local Radius Servers and EAP Authentication Balancing
      • Configuring Radius Server Settings
      • ACL Enforcement
      • Remote MAC Address Access Control Settings
    • 5GHz/2.4GHz Radio Advanced Settings for Provisioning Profiles
      • Configuring the RSSI Threshold
      • Configuring IEEE802.11r Settings for Secure Fast Roaming
      • Configuring IEEE802.11k Settings for Dynamic Radio Management
      • Configuring IEEE802.11v Settings for Dynamic Environment Management
    • Sensor Settings for WIDP in Provisioning Profiles
    • Mesh Network Settings for Provisioning Profiles
      • Setting Up a Mesh Network
      • Enabling a Multi-hop Mesh Network
      • Active/Active Clustering Full Mesh
    • 3G/4G/LTE WWAN Settings for Provisioning Profiles
      • Manually Configuring the 3G/4G/LTE WWAN Profile
      • Configuring Load Balancing among Multiple USB Modems
    • Bluetooth LE Settings for Provisioning Profiles
    • Deleting Access Point Profiles
    • Product Specific Configuration Notes
  • Managing Access Point Objects
    • Deleting Access Point Objects
    • Rebooting Access Point Objects
    • Modifying Access Point Objects
• Firmware Management
  • About Firmware Management
  • Obtaining the Latest SonicWall Firmware
  • Downloading Firmware from a Specific URL
  • Uploading Firmware to an Access Point
• Floor Plan View
  • Managing the Floor Plans
    • Selecting a Floor Plan
    • Creating a Floor Plan
    • Editing a Floor Plan
  • Managing Access Points
    • Available Devices
    • Added Access Points
    • Removing Access Points
    • Export Image
    • Context Menu
• Station Status
• Intrusion Detection Services
  • Scanning Access Points
  • Authorizing Access Points
• Advanced IDP
  • Enabling Wireless IDP on a Profile
  • Configuring Wireless IDP Settings
  • Viewing KRACK Sniffer Packets
• Packet Capture
• Virtual Access Points
  • Before Configuring VAPs
    • Determining Your VAP Needs
    • Determining Security Configurations
    • Sample Network Definitions
    • Prerequisites
    • VAP Configuration Worksheet
  • Access Point VAP Configuration Task List
  • Virtual Access Point Groups
  • Virtual Access Point Objects
    • General Tab
    • Advanced Tab
  • Virtual Access Point Profiles
    • Virtual Access Point Schedule Settings
    • Virtual Access Point Profile Settings
    • Remote MAC Address Access Control Settings
    • ACL Enforcement
    • IEEE802.11R Settings
    • IEEE802.11K Settings
    • IEEE802.11V Settings
    • Agile Multiband Settings
• RF Monitoring
  • Prerequisites
  • RF Monitoring Summary
  • 802.11 General Frame Setting
  • 802.11 Management Frame Setting
  • 802.11 Data Frame Setting
  • Discovered RF Threat Stations
  • Adding a Threat Station to the Watch List
  • Practical RF Monitoring Field Applications
    • Using Sensor ID to Determine RF Threat Location
    • Using RSSI to Determine RF Threat Proximity
• RF Analysis
  • Using RF Analysis on SonicWall Access Points
    • Understanding the RF Score
    • Channel Utilization Graphs and Information
    • Viewing Overloaded Channels
    • RFA Highly Interfered Channels
• RF Spectrum
• FairNet
  • Supported Platforms
  • FairNet Features
  • Management Interface Overview
  • Configuring FairNet
• Wi-Fi Multimedia
  • WMM Access Categories
  • Assigning Traffic to Access Categories
  • Configuring Wi-Fi Multimedia Parameters
    • Configuring WMM
    • Creating a WMM Profile for an Access Point
• 3G/4G/LTE WWAN
• Bluetooth LE Devices
  • Viewing BLE Scanned Data
• Radio Management
  • Configuring Radio Management
  • Configuring Dynamic Channel Selection Settings
• SonicWall Support
  • About This Document

Configuring Radius Server Settings

If you selected either WPA2 - EAP or WPA2 - AUTO - EAP in the Wireless Security section, the Radius Server Settings section appears for configuration of a RADIUS server to generate authentication keys. The server has to be configured for this and for communicating with the SonicWall appliance.

To configure Radius Server Settings

1. Click Radius Server Settings. The Radius Server Settings dialog displays. The options displayed on this dialog depend on the type of SonicPoint/SonicWave.

   

2. In the Retries field, enter the number times, from 1 to 10, the firewall attempts to connect before it fails over to the other Radius server.

3. In the Retry Interval field enter the time, from 0 to 60 seconds, to wait between retries. The default number is 0 or no wait between retries.

4. Define the Radius Server Settings as described in the following table:

   RADIUS Authentication Server Settings

   Option	Description
   Server 1 IP	The name/location of your RADIUS authentication server
   Server 1 Port	The port on which your RADIUS authentication server communicates with clients and network devices. The default port is 1812
   Server 1 Secret	The secret passcode for your RADIUS authentication server
   Server 2 IP	The name/location of your backup RADIUS authentication server
   Server 2 Port	The port on which your backup RADIUS authentication server communicates with clients and network devices. The default port is 1812
   Server 2 Secret	The secret passcode for your backup RADIUS authentication server

5. If you are using a Radius server to track usage for charging, set up the Radius Accounting Server:

   RADIUS Accounting Server Settings

   Option	Description
   Server 1 IP	The name/location of your RADIUS accounting server
   Server 1 Port	The port on which your RADIUS authentication server communicates with clients and network devices.
   Server 1 Secret	The secret passcode for your RADIUS authentication server
   Server 2	The name/location of your backup RADIUS authentication server
   Server 2 Port	The port on which your backup RADIUS authentication server communicates with clients and network devices.
   Server 2 Secret	The secret passcode for your backup RADIUS authentication server
   RADIUS CoA Support	When enabled, the device acts as a RADIUS dynamic authorization server and responds to RADIUS Change-of-Authorization and Disconnect messages sent by the RADIUS server.

6. To send the NAS identifier to the RADIUS server, select the type from the NAS Identifier Type drop-down menu:

   • Not Included (default)

   • SonicPoint’s Name

   • SonicPoint’s MAC Address

   • SSID – When the SSID option is selected, both the RADIUS authentication message and RADIUS accounting message carry the access point SSID.

7. To send the NAS IP address to the RADIUS Server, enter the address in the NAS IP Addr field.

8. Click OK.