Profiles > Aaa - Dell PowerConnect W-Airwave Configuration Manual

Profiles > AAA
This profile type defines authentication settings for the WLAN users, including the role for unauthenticated
users, and the different roles that should be assigned to users authenticated via 802.1x, MAC or SIP
authentication. Perform these steps to determine the need for and to configure AAA profiles.
1. To view and configure AAA profiles, click the
AAA Profiles
Figure 40 AAA Profiles Page of Aruba Configuration
2. From the navigation pane, you can configure the following profile types:
AAA Profile—The AAA profile defines the authentication method and the default user role for
unauthenticated users. This profile type references additional profiles. Refer to
page 68.
Captive Portal Auth—Captive portal authentication directs clients to a special web page that
typically requires them to enter a username and password before accessing the network. This profile
defines login wait times and the URLs for login and welcome pages, and manages the default user
role for authenticated captive portal clients. You can also use this profile to set the maximum number
of authentication failures allowed per user before that user is blacklisted. This profile includes a
reference to an Server group profile. Refer to
MAC Auth—Defines parameters for MAC address authentication, including the case of MAC string
(upper- or lower-case), the format of the diameters in the string, and the maximum number of
authentication failures before a user is blacklisted. Refer to
Stateful 802.11 Auth—Enables or disables 802.1x authentication for clients on non-Aruba APs, and
defines the default role for those users once they are authenticated. This profile also references a
server group to be used for authentication. Refer to
page 72.
Wired Auth—This profile merely references an AAA profile to be used for wired authentication.
Refer to
VPN Auth—Identifies the default role for authenticated VPN clients. This profile also references a
server group. Refer to
Management Auth—Enables or disables management authentication, and identifies the default
role for authenticated management clients. This profile also references a server group. Refer to
"Profiles > AAA > Management Auth" on
802.1x Auth—Manages settings for the 802.11k protocol. In a 802.1k network, if the AP with the
strongest signal is reaches its maximum capacity, clients may connect to an under utilized AP with a
weaker signal under utilized APs. Refer to
Stateful NTLM Auth—Requires that you specify a server group which includes the servers
performing NTLM authentication, and a default role to be assigned to authenticated users. Refer to
"Profiles > AAA > Stateful NTLM Auth" on
AirWave Wireless Management Suite | Configuration Guide
page appears and lists the current profiles.
"Profiles > AAA > Wired Auth" on
"Profiles > AAA > VPN Auth" on
AAA
profile heading in the navigation pane. The
Figure 40 illustrates this page.
"Profiles > AAA > Captive Portal Auth" on
"Profiles > AAA > Mac Auth" on
"Profiles > AAA > Stateful 802.1X Auth" on
page 73.
page 73.
page 74.
"Profiles > AAA > 802.1x Auth" on
page 80.
"Profiles > AAA" on
page 69.
page 71.
page 75.
Aruba Configuration Reference | 67