Manualshelf

Users Guide

ManualsBrandsDell ManualsAccess PlatformsW-Series Controller AOS
431432433434435436437438439440
Table Of Contents
437| Virtual APs Dell Networking W-Series ArubaOS 6.5.x| User Guide
2. Scroll down to the bottom of the AAA Profiles Summary pane, then click Add. An entry blank appears.
3. Enter the AAA profile name, then click Add.
4. In the profiles list, and select the AAA profile you just created.
5. Configure the AAA profile parameters (see
Table 97),
6. Click Apply.
Parameter Description
Initial role Click the Initial Role drop-down list and select a role for
unauthenticated users. The default role for unauthenticated users
is logon.
MAC Authentication Default
Role
Click the MAC Authentication Default Role drop-down list and select
the role assigned to the user when the device is MAC
authenticated. The default role for MAC authentication is the guest
user role. If derivation rules are present, the role assigned to the
client through these rules take precedence over the default role.
NOTE: This feature requires the PEFNG license.
802.1X Authentication Default
Role
Click the 802.1X Authentication Default Role drop-down list and
select the role assigned to the client after 802.1X authentication.
The default role for 802.1X authentication is the guest user role. If
derivation rules are present, the role assigned to the client through
these rules take precedence over the default role.
NOTE: This feature requires the PEFNG license.
User idle timeout
Select the Enable checkbox to configure user idle timeout value for
this profile. Specify the idle timeout value for the client in seconds. A
value of 0, deletes the user immediately after disassociation from
the wireless network. Valid range is 30-15300 in multiples of 30
seconds. Enabling this option overrides the global settings con-
figured in the AAA timers. If this is disabled, the global settings are
used.
RADIUS Interim Accounting When this option is enabled, the RADIUS accounting feature allows
the controller to send Interim-Update messages with current user
statistics to the server at regular intervals. This option is disabled
by default, allowing the controller to send only start and stop
messages to the RADIUS accounting server.
User derivation rules Click the User derivation rules drop-down list and specify a user
attribute profile from which the user role or VLAN is derived.
Wired to Wireless Roaming Enable this feature to keep users authenticated when they roam
from the wired side of the network. This feature is enabled by
default.
SIP authentication role Click the SIP authentication role drop-down list and specify the
role assigned to a session initiation protocol (SIP) client upon
registration.
Table 97: AAA Profile Parameters