Concept Guide

122 | Wired Profiles Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide
n New—On selecting this option, an external RADIUS server must be configured to authenticate the
users. For information on configuring an external server, see Configuring an External Server for
Authentication on page 164.Authentication and User Management on page 152
n Internal server— If an internal server is selected, add the clients that are required to authenticate
with the internal RADIUS server. Click the Users link to add the users. For information on adding a
user, see Managing W-IAP Users on page 152.
l Accounting—Select any of the following options:
n Disabled—Disables accounting.
n Use authentication servers—When selected, the authentication servers configured for the wired
profile are used for accounting purposes.
n Use separate servers—Allows you to configure separate accounting servers.
n Accounting interval—Allows you set an accounting interval within the range of 0–60 minutes for
sending interim accounting information to the RADIUS server.
n Reauth interval—Specify the interval at which all associated and authenticated clients must be
reauthenticated.
l Load balancing— Set this to Enabled if you are using two RADIUS authentication servers, so that the
load across the two RADIUSservers is balanced. For more information on the dynamic load balancing
mechanism, see Dynamic Load Balancing between Two Authentication Servers on page 164.
2. Click Next. The Access tab details are displayed.
In the CLI
To configure security settings for an employee network:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# mac-authentication
(Instant AP)(wired ap profile <name>)# l2-auth-failthrough
(Instant AP)(wired ap profile <name>)# auth-server <name>
(Instant AP)(wired ap profile <name>)# server-load-balancing
(Instant AP)(wired ap profile <name>)# radius-accounting
(Instant AP)(wired ap profile <name>)# radius-accounting-mode {user-association|user-
authentication}
(Instant AP)(wired ap profile <name>)# radius-interim-accounting-interval <minutes>
(Instant AP)(wired ap profile <name>)# radius-reauth-interval <Minutes>
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply
Configuring Access Rules for a Wired Profile
The Ethernet ports allow third-party devices such as VoIP phones or printers (that support only wired
connections) to connect to the wireless network. You can also configure an Access Control List (ACL) for
additional security on the Ethernet downlink.
If you are creating a new wired profile, complete the WiredSettings and configure VLAN and security
parameters, before defining access rules. For more information, see Configuring Wired Settings on page 119,
Configuring VLAN for a Wired Profile on page 120, and Configuring Security Settings for a Wired Profile on
page 121.
You can configure access rules by using the Instant UI or CLI.
In the Instant UI
To configure access rules:
1. On the Access tab, configure the following access rule parameters.