Re: [Ubnt_users] Authentication for SMs

[Jesse DuPont]

One of our companies uses VISP and VISP requires that you use their RADIUS servers. The other company has on-premise RADIUS, but no billing system integration. We just manage it manually (using the daloRADIUS interface). Jesse DuPont Network Architect email: jesse.dup...@celeritycorp.net Celerity Networks LLC Celerity Broadband LLC Like us! facebook.com/celeritynetworksllc Like us! facebook.com/celeritybroadband On 6/22/16 11:48 AM, Nigel Newallo-Singh wrote: Thanks for the responses everyone.  So I figured RADIUS was inevitable, and I have no issues with this as I have good linux guys on staff.  Bear with me here. Did you have to develop your own middleware to query your billing system or use a billing system provider (VISP, etc) that will send info to your RADIUS server? If so how has been the experience so far (ie. developing software inhouse or using an external billing provider). On Wed, Jun 22, 2016 at 12:43 PM, Jesse DuPont <jesse.dup...@celeritycorp.net> wrote: RADIUS. We're using RADIUS for SM auth on UBNT M5 gear (which is mac:mac sent as a RADIUS "User Password"); also works the same on MikroTik for MAC authentication. On UBNT 5AC gear, we use WPA2-AES w/EAP, which also uses RADIUS. WPA2-AES w/EAP is more complicated to setup for two reasons - 1) certificates need installed on the RADIUS server (can be self-signed); and 2) the SM needs a user/pass configured (it is the EAP supplicant). You could use the same user/pass in all SM's, but then you can't disallow a single SM from connecting to the AP. For this, we chose to use a unique user/pass for each customer. This same user/pass is also the customer's PPPoE user/pass. Jesse DuPont Network Architect email: jesse.dup...@celeritycorp.net Celerity Networks LLC Celerity Broadband LLC Like us! facebook.com/celeritynetworksllc Like us! facebook.com/celeritybroadband On 6/22/16 10:26 AM, Josh Luthman wrote: Radius is I think the only other way? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Wed, Jun 22, 2016 at 12:25 PM, Nigel Newallo-Singh <nigel.newallosi...@greendotgroup.co> wrote: Hi All, I want to implement some form of authentication for my Customer SMs (beside of course the wireless pre-shared key). Can anyone give some good advice on what works to do this (Radius, etc).  -- Warm Regards, Nigel Newallo-Singh http://www.gd.tt/ _______________________________________________ Ubnt_users mailing list Ubnt_users@wispa.org http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list Ubnt_users@wispa.org http://lists.wispa.org/mailman/listinfo/ubnt_users _______________________________________________ Ubnt_users mailing list Ubnt_users@wispa.org http://lists.wispa.org/mailman/listinfo/ubnt_users -- Warm Regards, Nigel Newallo-Singh http://www.gd.tt/ _______________________________________________ Ubnt_users mailing list Ubnt_users@wispa.org http://lists.wispa.org/mailman/listinfo/ubnt_users

_______________________________________________
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users