User guide

Virtual Network configuration
A31003-W1010-A100-1-7619, July 2005
78 HiPath Wireless Controller, Access Points and Convergence Software V3.0: User Guide
HWC_VNSConfiguration.fm
Authentication for a VNS
Create an AAA topology
1. Using the Assignment by drop-down list, select AAA.
2. To configure the VNS, follow steps 2 to 20 above, for the Topology for Captive Portal (SSID
network assignment), with the exception of step 7.
Configuring a VNS for Third-party APs is only available with SSID network assignment.
Save the new VNS
3. To save this VNS configuration for AAA, click on the Save button.
7.2 Authentication for a VNS
The next step in configuring a VNS is to set up the Authentication mechanism in the
Authentication and Accounting screen. There are various combinations available:
● If network assignment is by SSID, authentication can be:
● none
● by Captive Portal using internal Captive Portal
● by Captive Portal using external Captive Portal
● by MAC-based authentication
● If network assignment is by AAA (802.1x), authentication can be:
● by 802.1x authentication, the wireless device user must be authenticated before
gaining network access
● by MAC-based authentication
The first step for any type of authentication is to select RADIUS servers (defined in the Global
Settings screen), to be used for:
● Authentication
● Accounting
● MAC-based authentication
MAC-based authentication enables network access to be restricted to specific devices by MAC
address. The HiPath Wireless Controller queries a RADIUS server for MAC address when a
wireless client attempts to connect to the network. This is available in addition to the other types
of authentication for all VNS definitions.