Users Guide

Dell PowerConnect W-Series ArubaOS 6.1 | User Guide Access Points | 111
For more details, see “Enable 802.11k Support” on page155.
SSID profile—Configures network authentication and encryption types. This profile also includes references
to the EDCA (enhanced distributed channel access) Parameters Station Profile, the EDCA Parameters AP
Profile and a High-throughput SSID profile.
Use this profile to configure basic settings such as 802.11 authentication and encryption settings, or advanced
settings such as DTIM (delivery traffic indication message) intervals, 802.11a/802.11g basic and transmit
rates, DHCP settings and WEP keys. The advanced SSID profile settings allows you to deny broadcast probes
and hide the SSID. For details on configuring an SSID profile, see “Creating a new SSID Profile” on
page148.
High-throughput SSID profile—High-throughput APs support additional settings not available in legacy
APs. A High-throughput SSID profile enables/disables high-throughput (802.11n) features with 40 MHz
channel usage, and define values for aggregated MAC protocol data units (MDPUs) and Modulation and
Coding Scheme (MCS) ranges. If you modify a currently provisioned and running high-throughput SSID
profile, your changes take effect immediately; rebooting is not required. For details on configuring a high-
throughput SSID profile, see Table 35 on page 159.
Virtual AP profile—This profile defines your WLAN by enabling or disabling the bandsteering, fast roaming
and DoS prevention features. It defines radio band, forwarding mode and blacklisting parameters, and
includes references to an AAA Profile, 802.11K Profile, and a High-throughput SSID profile. You can apply
multiple virtual AP profiles to an AP group or to an individual AP; for most other profiles, you can apply only
one instance of the profile to an AP group or AP at a time.
AAA profile—This defines authentication settings for the WLAN users, including the role for
unauthenticated users, and the different roles that should be assigned to users authenticated via 802.1x, MAC
or SIP authentication. This profile includes references to:
MAC Authentication Profile
MAC Authentication Server Group
802.1X Authentication Profile
802.1X Authentication Server Group
RADIUS Accounting Server Group
For details on configuring an AAA profile, see “AAA Profile Parameters” on page143.
XML API server profile—Specifies the IP address of an external XML API server.
RFC 3576 server—Specifies the IP address of a RFC 3576 RADIUS server.
MAC authentication profile—Defines parameters for MAC address authentication, including upper- or
lower-case MAC string, the diameter format in the string, and the maximum number of authentication
failures before a user is blacklisted.
Captive portal authentication profile—This profile directs clients to a web page that requires them to enter a
username and password before being granted access to the network. This profile defines login wait times, the
URLs for login and welcome pages, and manages the default user role for authenticated captive portal clients.
You can also set the maximum number of authentication failures allowed per user before that user is
blacklisted. This profile includes a reference to a Server group profile. For complete information on
configuring a Captive portal authentication profile, see Chapter 15, “Captive Portal” on page351.
802.1x authentication profile—Defines default user roles for machine or 802.1x authentication, and
parameters for 8021.x termination and failed authentication attempts. For a list of the basic parameters in the
802.1x authentication profile, see Chapter 10, “802.1x Authentication” on page285
CAUTION: Configuring the 802.11a and 802.11g beacon rates should only be used in conjunction with Distributed Antenna
Systems (DAS). Configuring beacon rates during normal operation may cause connectivity problems.