Concept Guide

107 | Wired Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide
authentication fail-thru check box is displayed only when both MAC authentication and 802.1X
authentication are Enabled.
l Select any of the following options for Authentication server 1:
n New—On selecting this option, an external RADIUS server must be configured to authenticate the
users. For information on configuring an external server, see Configuring an External Server for
Authentication on page 151.Authentication and User Management on page 139
n Internal server— If an internal server is selected, add the clients that are required to authenticate
with the internal RADIUS server. Click the Users link to add users. For information on adding a user,
see Managing W-IAP Users on page 139.
l Accounting—Select any of the following options:
n Disabled—Disables accounting.
n Use authentication servers—When selected, the authentication servers configured for the wired
profile are used for accounting purposes.
n Use separate servers—Allows you to configure separate accounting servers.
n Accounting interval—Allows you set an accounting interval within the range of 0–60 minutes for
sending interim accounting information to the RADIUS server.
n Reauth interval—Specify the interval at which all associated and authenticated clients must be
reauthenticated.
l Load balancing—Set this to Enabled if you are using two RADIUS authentication servers, so that the
load across the two RADIUSservers is balanced. For more information on the dynamic load balancing
mechanism, see Dynamic Load Balancing between Two Authentication Servers on page 151.
2. Click Next. The Access tab details are displayed.
In the CLI
To configure security settings for an employee network:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# mac-authentication
(Instant AP)(wired ap profile <name>)# l2-auth-failthrough
(Instant AP)(wired ap profile <name>)# auth-server <name>
(Instant AP)(wired ap profile <name>)# server-load-balancing
(Instant AP)(wired ap profile <name>)# radius-accounting
(Instant AP)(wired ap profile <name>)# radius-accounting-mode {user-association|user-
authentication}
(Instant AP)(wired ap profile <name>)# radius-interim-accounting-interval <minutes>
(Instant AP)(wired ap profile <name>)# radius-reauth-interval <Minutes>
(Instant AP)(wired ap profile <name>)# trusted
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply
Configuring Access Rules for a Wired Profile
The Ethernet ports allow third-party devices such as Voice over Internet Protocol (VoIP) phones or printers
(that support only wired connections) to connect to the wireless network. You can also configure an Access
Control List (ACL) for additional security on the Ethernet downlink.
If you are creating a new wired profile, complete the WiredSettings and configure the VLAN and security
parameters before defining access rules. For more information, see Configuring Wired Settings on page 104,
Configuring VLAN for a Wired Profile on page 105, and Configuring Security Settings for a Wired Profile on
page 106
.
You can configure access rules by using the Instant UI or the CLI.