Trapeze MXR-2

From RadiusExpert

The MXR-2 can manage up to 3 access points (such as the MP-352) to provide an extended coverage cell and to provide easy roaming among the access points in the cell.

There are a few gotchas when configuring this device for Radius:

Caution: For Radius authentication, you need to go to 'AAA; Radius' page, add a Radius server, and then add a group that contains that server. Then you need to change the 'authentication' entry on the 'AAA:Network Users: Authentication and Accounting' page with the name of the Radius group in the 'AAA Method' field.

Caution: if the Radius shared secret is set to an empty string on the 'AAA; Radius' page (in the 'Key' field), the server will never be used.

Caution: When using Radius authentication, Access-Accepts must contain the TRPZ-VLAN-Name attribute to specify the name of the vlan to place the user in, such as default:

 TRPZ-VLAN-Name=default

Accounting requests look like this:

 Attributes:
       Acct-Status-Type = Start
       User-Name = "mikem"
       Acct-Multi-Session-Id = "SESS-26-309d40-517333-376eca"
       Acct-Session-Id = "SESS-26-309d40-517333-376eca"
       Event-Timestamp = 1150517333
       Calling-Station-Id = "00-12-F0-72-DA-54"
       NAS-Port-Id = "2056/1"
       Called-Station-Id = "00-0B-0E-0C-DF-C0:trapeze-mxr2"
       NAS-Port-Type = Wireless-IEEE-802-11
       Acct-Delay-Time = 0
       NAS-IP-Address = 203.63.154.243