User`s guide

Configure Employee Access Services
3-4 Configuring Wireless Services
Step Summary
Thefollowinglistsummarizesthefieldsselectedorconfigurationitemsenteredintheexample
thatfollowstoconfigureEmployeeaccess:
1. Createaradioprofile.
a. FromtheRadioProfilewizard,enterRadioProfile1asthenameoftheradioprofile.
b. ClickFinish.
2. ConfiguretheRADIUSbackend:
a. ConfiguretheRADIUSserverfor802.1X.Use
therecommendedEAPmethod,PEAP+
MS‐CHAPv2.
b. SetupeachRoamAboutSwitch asaRADIUSclient.
c. DefineanydesiredEnterasysvendor‐specificattributes(VSAs).
d. ConfigureeachuserrecordwitheithertheVLAN‐NameattributeortheRADIUSTunnel‐
Private‐Group‐ID.
e. Configure802.1Xauthenticationrules.
3. ConfiguretheRADIUSserverinRASM:
a. From
theCreateRADIUSwizard,entersg1astheNameoftheserver,theserver’sIP
address,andtheKey.Allowthe wizardtocreatetheservergroupandplacetheserverin
itforyou.
b. ClickFinish.
4. Createaserviceprofilefor802.1Xservice.
a. Fromthe802.1xServiceProfilewizard,
clickNextandenterSecure‐802.1X‐Employeesas
theNameoftheserviceprofileandEmployeesastheSSID.
b. ClickNext.SelectWPAanddeselectDynamicWEP.
c. ClickNext.LeaveTKIPenabled.ClickNext.LeaveExternalRADIUSServerenabled.
SelecttheRADIUSservergroupandclickAdd.
d. ClickNext.Enter
vlan‐mktasthedefaultVLANtouseiftheVLANisnotassignedby
RADIUSauthorization.
e. ClickNext.SelectRadioProfile1andclickAdd.SelectdefaultandclickRemove.
f. ClickFinish.
5. SetupaVLANontheRoamAboutSwitches.
a. FromtheCreateVLANwizard,entervlan‐mktastheVLAN
name.
b. ClickNext.SelecttheVLANports.ClickAddtosharethemwithotherVLANsorMove
tousethemexclusivelyinthisVLAN.IfyouclickAdd,thenselectTag.
c. ClickFinish.