O'Reilly logo

ScreenOS Cookbook by Sunil Wadhwa, Joe Kelly, Ken Draper, David Delcourt, Vik Davar, Stefan Brunner

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

3.5. Configure WPA with the Steel-Belted Radius Server and Odyssey Access Client

Problem

You want to configure the Steel-Belted Radius server and Odyssey Access Client for wireless connection.

Solution

To configure the firewall as the AP, first you must configure the auth server using an account type of 802.1x and select RADIUS as the auth server type:

	set auth-server "MyServer" server-name "172.24.28.199"
	set auth-server "MyServer" account-type 802.1X
	set auth-server "MyServer" radius secret "RADIUS_SECRET"

Then, configure the SSID with an authentication type of wpa-auto and an encryption type of auto, associate the 802.1x auth server, and bind the SSID to the wireless interface:

	set ssid name Sunnyvale
	set ssid Sunnyvale client-isolation
	set ssid Sunnyvale authentication wpa-auto encryption auto auth-server
	   MyServer
	set ssid Sunnyvale interface wireless0

To configure the infrastructure to enable traffic flow through the AP, create the zone, attach a wireless interface to the zone, configure the IP address, enable the DHCP server service on the wireless interface, configure the security policy, and activate the wireless connection:

 set zone name "wzone1" set interface "wireless0/0" zone "wzone1" set interface wireless0/0 ip 10.1.1.1/24 set interface wireless0/0 dhcp server service set interface wireless0/0 dhcp server auto set interface wireless0/0 dhcp server option gateway 10.1.1.1 set interface wireless0/0 dhcp server option netmask 255.255.255.0 set interface wireless0/0 dhcp server ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required