Owners manual

148 | Authentication and User Management Aruba Instant 6.4.0.2-4.1 | User Guide
2. To add a user, click New. The New Guest User pop-up window is displayed.
3. Specify a Username and Password.
4. Retype the password to confirm.
5. Click OK.
Understanding Authentication Methods
Authentication is a process of identifying a user by through a valid username and password or based on their MAC
addresses. The following authentication methods are supported in Instant:
l 802.1X authentication
l MAC authentication
l MAC authentication with 802.1X authentication
l Captive Portal Authentication
l MAC authentication with Captive Portal authentication
l 802.1X authentication with Captive Portal Role
l WISPr authentication
802.1X authentication
802.1X is an IEEE standard that provides an authentication framework for WLANs. 802.1x uses the Extensible
Authentication Protocol (EAP) to exchange messages during the authentication process. The authentication
protocols that operate inside the 802.1X framework include EAP-Transport Layer Security (EAP-TLS), Protected
EAP (PEAP), and EAP-Tunneled TLS (EAP-TTLS). These protocols allow the network to authenticate the client
while also allowing the client to authenticate the network. For more information on EAP authentication framework
supported by the IAP, see Supported EAP Authentication Frameworks on page 150.
802.1X authentication method allows an IAP to authenticate the identity of a user before providing network access to
the user. The Remote Authentication Dial In User Service (RADIUS) protocol provides centralized authentication,
authorization, and accounting management. For authentication purpose, the wireless client can associate to a
network access server (NAS) or RADIUS client such as a wireless IAP. The wireless client can pass data traffic
only after successful 802.1X authentication.
For more information on configuring an IAP to use 802.1X authentication, see Configuring 802.1X Authentication for
a Network Profile on page 164.