AirOS with Radius in mode AP

[portodur]

You could add Radius AP mode in WEB configuration page?

[mikeh]

I was really looking forward to deplying a couple of shiny new bullets to replace some aging consumer devices running customer firmware but then in configuring them tonight I'm shocked that radius authentication is not supported out of the box. Reading post it sounds like this feature is farily low on the prirority list and this is suprising to me.

In my case I would like to authenticate to the Windows AD server so as to keep my users with a common login and also to cut down on sharing of passwords. I actually have two non-profits that I would like to do this at and was really looking forward to nuking my consumer access points and going with something more solid.

So I understand I can hack the development kit and make it work...eventually. I could also go install openwrt or that other open source software that cost money. I was really looking forward to the simple AirOS interface.

So any any idea when Radius will be included in the standard build?


Thanks

[Yotendoten]

I would really like to see this as well. Would help eliminate the need to use the MAC ACL, which seems to be fairly limited in nature. Any hopes to see it in AirOS V anytime soon? :)

[burkni]

Hi...
I'm like the others... ...I need Radius on the AP. Not being able to use Radius with NanoStation is driving me away from Ubnt, which I don't like because they make good AP's. Is there any hope they will have it available soon???

[WHT]

I'm going to go out on a limb here and suggest there isn't enough memory in the standard to support a Radius server.

[burkni]

OK. Thanks for a quick reply WHT. I don't buy it but maybe you're right... ...but what about giving an option to have Radius instead of something else? Like instead of iptables? Or instead of WPA or something??? Is this possible? How much memory does NanoStation2 have?

[WHT]

Mike Ford could answer that better than I could.

[mikeh]

I'm just after Radius authentication with an existing radius server (an AD server running the radius server in my case) and not a full radius server. Now my ignorance of how radius works is showing so perhaps you need a full radius server to authenticate with an existing radius server is why WHT is suggesting there isn't enough memory and that you need a full server.


Actually thinking about what I really want to do (and my guess of what others want to do) I really don't care how an authentication token is passed to the Windows AD domain. Active directory is the way it has always been done in the past for such things. Then again Active Directory is also old school. Corporations I work with all use LDAP for most of their authentication so perhaps the new and improved way of doing this would be to offer LDAP authentication and skip Radius all together.

[Sirhc]

Isn't radius auth 802.1x. Now my old equip. had 802.1x for radius auth and they had far less memory and flash.

[amcinteng]

Radius just as a client should be no big deal and most decent network equipment support it whatever memory they have!

Ubiquiti, pretty please?

[burkni]

Hi there.
How are things with the Radius client in AirOS? I'm like mikeh and I guess many others, we're just looking for the availability to authenticate against Radius server, not to have a Radius server built in the thing. Many low end gadgets has this availability, f.ex. DLink and Planet, so I would assume that better equipments like from Ubiquiti would have that feature also.

[saso]

Hi guys,

if you need a sort of Radius Client look at chillispot in AirOS (http://www.3ts.it)

bye