1076| External User Management AOS-W 6.5.3.x| User Guide
Using the XML API Server
Follow the steps below to use the XML API:
1. Configure an XML API server.
2. Associate the XML API server to an appropriate AAA profile.
3. Configure a user role to direct non-authenticated users to the external captive portal server.
4. Configure captive portal profile and associate that to an initial role (example logon).
5. Create an XML request with the appropriate API call.
6. Process XML response appropriately.
The default logon role of a client or user must have captive-portal enabled.
Configuring the XML API Server
Configure an external XML API server in your AAA infrastructure. In this example, 10.11.12.13 is your server.
The XML API interface on the switch will receive requests from this server.
Define the XML API server and specify the key for verifying requests from your server:
(host) (config) #aaa xml-api server 10.11.12.13
(host) (XML API Server “10.11.12.13”) #key aruba123
Verify the XML API server configuration:
(host) #show aaa xml-api server
XML API Server List
-------------------
Name References Profile Status
---- ---------- --------------
10.11.12.13 0
Total:1
Associating the XML API Server to a AAA profile
After you define the XML API server profile associate it to the appropriate AAA profile. If the XML API server is
not correctly configured in the appropriate profile, the switch will respond with the client not authorized
error message. You can add XML API server references to the following AAA profile depending on your
requirement:
For wireless users, associate the XML API server to the AAA profile of the virtual AP profile:
(host) (config) #aaa profile wirelessusers
(host) (AAA Profile "wirelessusers") #xml-api-server 10.11.12.13
(host) (AAA Profile "wirelessusers") #exit
(host) (config) #show aaa profile wirelessusers
AAA Profile "wirelessusers"
---------------------------
Parameter Value
--------- -----
Initial role logon
MAC Authentication Profile N/A
MAC Authentication Default Role guest
MAC Authentication Server Group default
802.1X Authentication Profile N/A
802.1X Authentication Default Role guest
802.1X Authentication Server Group N/A
RADIUS Accounting Server Group N/A
To Next Page
Loading...