Skip to main content

NAS Clients

Register each network device that will send RADIUS requests to DashX — your Wi‑Fi controllers, switches, and firewalls (the "NAS" / authenticators). DashX only answers requests from clients you've added.

Add a NAS client​

  1. Go to Network → RADIUS / NAC → NAS Clients → Add.
  2. Fill in:
    • Name (e.g. HQ Wi‑Fi Controller) and optional Short name.
    • Address (IP or CIDR) — the source address the NAS uses (e.g. 10.0.0.0/24 for a range).
    • NAS‑Identifier (optional) — matched in Access Policies.
    • Vendor (Cisco / Aruba / Meraki / …) and Type (wifi / wired / …).
    • Group (optional) — for organizing and policy matching.

Secret vs RADSEC​

  • Classic RADIUS — set a shared secret; enter the same secret on the NAS.
  • RADSEC (recommended) — enable Use RADSEC and pin the NAS's client cert fingerprint (SHA‑256) so only that device's certificate is trusted. (Issue the edge/client cert from Edge Tokens / Certificates as needed.)

Change of Authorization (CoA)​

Enable CoA to let DashX push mid‑session changes (bounce a port, re‑auth, change VLAN). Set the CoA port (default 3799) and a CoA secret matching the NAS.

Edit or delete a client any time from the list.

tip

Use a CIDR address to cover a whole controller cluster or switch stack with one entry instead of adding each IP.