111
| Wired Profiles
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
authentication fail-thru
check box is displayed only when both
MAC authentication
and
802.1X
authentication
are
Enabled
.
l
Select any of the following options for
Authentication server 1
:
n
New
—On selecting this option, an external RADIUS server must be configured to authenticate the
users. For information on configuring an external server, see
Configuring an External Server for
.
Authentication and User Management on page 143
n
Internal server
— If an internal server is selected, add the clients that are required to authenticate
with the internal RADIUS server. Click the
Users
link to add users. For information on adding a user,
see
Managing IAP Users on page 143
l
Accounting
—Select any of the following options:
n
Disabled
—Disables accounting.
n
Use authentication servers
—When selected, the authentication servers configured for the wired
profile are used for accounting purposes.
n
Use separate servers
—Allows you to configure separate accounting servers.
n
Accounting interval
—Allows you set an accounting interval within the range of 0–60 minutes for
sending interim accounting information to the RADIUS server.
n
Reauth interval
—Specify the interval at which all associated and authenticated clients must be
reauthenticated.
l
Load balancing
—Set this to
Enabled
if you are using two RADIUS authentication servers, so that the
load across the two RADIUS servers is balanced. For more information on the dynamic load balancing
mechanism, see
Dynamic Load Balancing between Two Authentication Servers on page 156
.
2. Click
Next
. The
Access
tab details are displayed.
In the CLI
To configure security settings for an employee network:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# mac-authentication
(Instant AP)(wired ap profile <name>)# l2-auth-failthrough
(Instant AP)(wired ap profile <name>)# auth-server <name>
(Instant AP)(wired ap profile <name>)# server-load-balancing
(Instant AP)(wired ap profile <name>)# radius-accounting
(Instant AP)(wired ap profile <name>)# radius-accounting-mode {user-association|user-
authentication}
(Instant AP)(wired ap profile <name>)# radius-interim-accounting-interval <minutes>
(Instant AP)(wired ap profile <name>)# radius-reauth-interval <Minutes>
(Instant AP)(wired ap profile <name>)# trusted
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply
Configuring Access Rules for a Wired Profile
The Ethernet ports allow third-party devices such as Voice over Internet Protocol (VoIP) phones or printers
(that support only wired connections) to connect to the wireless network. You can also configure an Access
Control List (ACL) for additional security on the Ethernet downlink.
If you are creating a new wired profile, complete the Wired Settings and configure the VLAN and security
parameters before defining access rules. For more information, see
Configuring Wired Settings on page 108
,
Configuring VLAN for a Wired Profile on page 109
, and
Configuring Security Settings for a Wired Profile on
.
You can configure access rules by using the Instant UI or the CLI.
