Concept Guide

175 | Authentication and User Management Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide
Enabling Authentication Survivability
You can enable authentication survivability for a wireless network profile through the UI or CLI.
In the Instant UI
To configure authentication survivability for a wireless network:
1. On the Network tab, click New to create a new network profile or select an existing profile for which you
want to enable authentication survivability and click edit.
2. In the Edit <profile-name> or New WLAN window, ensure that all required WLAN and VLAN attributes
are defined, and then click Next.
3. On the Security tab, under Enterprise security settings, select an existing authentication server or create a
new server by clicking New.
4. To enable authentication survivability, select Enabled from the Authentication survivability drop-down.
On enabling this, the W-IAP authenticates the previously connected clients using EAP-PEAP and EAP-TLS
authentication when connection to the external authentication server is temporarily lost.
5. Specify the cache timeout duration, after which the cached details of the previously authenticated clients
expire. You can specify a value within the range of 1-99 hours and the default cache timeout duration is 24
hours.
6. Click Next and then click Finish to apply the changes.
Important Points to Remember
l Any client connected through CPPM and authenticated through W-IAP remains authenticated with the W-
IAP even if the client is removed from the CPPM server during the CPPM downtime.
l Do not make any changes to the authentication survivability cache timeout duration when the
authentication server is down.
l For EAP-PEAP authentication, ensure that the CPPM 6.0.2 or later version is used for authentication. For
EAP-TLS authentication, any external or third-party server can be used.
l For EAP-TLS authentication, ensure that the server and CAcertificates from the authentication servers are
uploaded on W-IAP. For more information, see Uploading Certificates on page 186.
In the CLI
To configure authentication survivability for a wireless network:
(Instant AP)(config)# wlan ssid-profile <name>
(Instant AP)(SSID Profile <name>)# type {<Employee> | <Voice>| <Guest>}
(Instant AP)(SSID Profile <name>)# auth-server <server-name1>
(Instant AP)(SSID Profile <name>)# auth-survivability
(Instant AP)(SSID Profile <name>)# exit
(Instant AP)(config)# auth-survivability cache-time-out <hours>
(Instant AP)(config)# end
(Instant AP)# commit apply
To view the cache expiry duration:
(Instant AP)# show auth-survivability time-out
To view the information cached by the W-IAP:
(Instant AP)# show auth-survivability cached-info
To view logs for debugging:
(Instant AP)# show auth-survivability debug-log