User Manual

25
UniFi Controller User Guide
Ubiquiti Networks, Inc.
Chapter 3: Using the UniFi Controller Software
Add or Edit a NAI Realm
Name Enter the name of the NAI realm.
Realm Enabled Check the box to enable the NAI realm.
This option is disabled by default.
EAP Method Select the Extensible Authentication Profile
(EAP) method: EAP-TLS, EAP-SIM, EAP-TTLS, EAP-AKA, or
EAP-AKA’.
(List of authentication types) Displays a list of
authentication types that have been defined for this NAI
realm list entry:
• Auth Type Displays the authentication type.
• Auth Subtype Displays the authentication subtype.
• Actions Click to delete the authentication type
from the list.
To add an authentication type to the list, fill out the
AuthType and Auth Subtype fields, and then click
ADD AUTH
.
The available authentication subtypes vary depending on
the value of Auth Type, as shown in the following table:
Auth Type Auth Subtype
Non-EAP Inner Authentication PAP, CHAP, MSCHAP, MSCHAPv2
Inner Authentication EAP Method None
Credential SM, USIM, NFC Secure Element,
Hardware Token, Softoken,
Certificate, Username/Password,
Anonymous, Vendor Specific
Cancel Click to discard your changes.
Submit Click to save your changes to the NAI realm list
entry.
Domain Name List
(List of domain names) Displays a list of domain names
that have been defined for this NAI realm list entry:
• Name Displays the domain name.
• Actions Click to delete the domain name from
the list.
To add a domain name to the list, fill out the Name field,
and then click
ADD DOMAIN NAME
.
Roaming Consortium List
(List of roaming consortiums) Displays a list of roaming
consortiums that have been defined for this NAI realm list
entry:
• Name Displays the name of the roaming consortium.
• Organization ID Displays the roaming consortium’s
IEEE-assigned organization ID.
• Actions Click to delete the roaming consortium
from the list.
To add a roaming consortium to the list, fill out the
Name and Organization ID fields, and then click
ADD ROAMING CONSORTIUM
.
3GPP Cellular Network List
(List of 3GPP cellular networks) Displays a list of 3GPP
cellular networks that have been defined for this NAI realm
list entry:
• Name Displays the name of the 3GPP cellular network.
• MCC Displays the Mobile Country Code (MCC).
• MNC Displays the Mobile Network Code (MNC).
• Actions Click to delete the 3GPP cellular network
from the list.
To add a 3GPP cellular network to the list, fill out the Name,
MCC, and MNC fields, and then click
ADD 3GPP CELLULAR NETWORK
.
Settings > Networks
Configure the networks for each site.
Networks
Name Displays the network name.
Purpose Displays the purpose of this network: Corporate,
Guest, VLAN Only, Remote User VPN, Site-to-Site VPN, or
VPNClient.
Subnet Displays the IP address and prefix size.
VLAN Displays the VLAN ID, if applicable.