Owners manual

3. Associate the required ANQP and H2QP advertisement profiles created in step 1 to the hotspot profile created in
step 2.
4. Create a SSID Profile with enterprise security and WPA2 encryption settings and associate the SSID with the
hotspot profile created in step 2.
Creating Advertisement Profiles for Hotspot Configuration
A hotspot profile contains one or several advertisement profiles. The following advertisement profiles can be
configured through the Instant CLI:
l ANQP advertisement profiles
n NAI Realm profile
n Venue Name Profile
n Network Authentication Profile
n Roaming Consortium Profile
n 3GPP Profile
n IP Address availability Profile
n Domain Name Profile
l H2QP advertisement profiles
n Operator Friendly Name Profile
n Connection Capability Profile
n Operating Class Profile
n WAN-Metrics Profile
Configuring an NAI Realm Profile
You configure a Network Access Identifier (NAI) Realm profile to define the NAI realm information, which can be
sent as an ANQP IE in a GAS query response.
To configure a NAI profile, enter the following commands at the command prompt:
(Instant AP)(config)# hotspot anqp-nai-realm-profile <name>
(Instant AP)(nai-realm <name>)# nai-realm-name <name>
(Instant AP)(nai-realm <name>)# nai-realm-encoding {<utf8>|<rfc4282>}
(Instant AP)(nai-realm <name>)# nai-realm-eap-method <eap-method>
(Instant AP)(nai-realm <name>)# nai-realm-auth-id-1 <authentication-ID>
(Instant AP)(nai-realm <name>)# nai-realm-auth-id-2 <authentication-ID>
(Instant AP)(nai-realm <name>)# nai-realm-auth-value-1 <authentication-value>
(Instant AP)(nai-realm <name>)# nai-realm-auth-value-2 <authentication-value>
(Instant AP)(nai-realm <name>)# nai-home-realm
(Instant AP)(nai-realm <name>)# enable
(Instant AP)(nai-realm <name>)# end
(Instant AP)# commit apply
You can specify any of the following EAP methods for the nai-realm-eap-method <eap-method> command:
l identity— To use EAP Identity type. The associated numeric value is 1.
l notification—To allow the hotspot realm to use EAP Notification messages for authentication. The associated
numeric value is 2.
l one-time-password—To use Authentication with a single-use password. The associated numeric value is 5.
l generic-token-card—To use EAP Generic Token Card (EAP-GTC). The associated numeric value is 6.
l eap-tls—To use EAP-Transport Layer Security. The associated numeric value is 13.
l eap-sim—To use EAP for GSM Subscriber Identity Modules. The associated numeric value is 18.
Aruba Instant 6.4.0.2-4.1 | User Guide Hotspot Profiles | 344