Authentication Domains

Authentication domains allow you to map users to different authentication sources based on the user’s domain. For instance, “user@foo.com” can be authenticated against your Active Directory, while “user@bar.com” can be authenticated against a remote LDAP server. Even if you have only a single domain, this feature gives you the ability to add support for guest accounts: configure “company.com” to authenticate against your company’s user directory, while “guest.company.com” is configured to use Elektron’s built-in user database for easy temporary account creation.

MAC Address Authentication

Simultaneous use of MAC address and standard user account authentication is supported in Elektron version 2, and is fully configurable on a per-access point basis.

Full Windows Vista Support

Elektron’s Windows Vista feature set has been updated to include full support for installation on Vista (including UAC support) and to authenticate Windows Vista clients when installed on any supported platform.

SNMP

Elektron can be configured to to respond to SNMP management information requests in accordance with the standardized RADIUS MIBs, and to issue SNMP traps is response to a user-configurable set of server events.

Authorization Policies

Policy support has been enhanced in Elektron version 2, with new support for triggering actions based on string pattern matching of the username, account groups, access points, and MAC addresses. Support for external scripts includes the ability to trigger policies based on the script result, and to have an external script act upon the result of the policy. Also included is greatly simplified configuration of VLAN assignment, one of the most common uses of authorization policies.

EAP-FAST

Support for Cisco’s EAP Flexible Authentication via Secure Tunneling protocol makes its debut in Elektron version 2.

Least Privilege

Elektron version 2 honors the “principle of least privilege,” in which the server performs its normal functions at the lowest possible level of security privilege, closing potential avenues of attacks on your server.