Aruba RAP-155 - Associate Server Profiles to a Network Profile; Understanding Encryption Types

164 | Authentication and User Management Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
(Instant AP)(Auth Server <profile-name>)# drp-ip <IP-address> <mask> vlan <vlan> gateway
<gateway-IP-address>
(Instant AP)(Auth Server <profile-name>)# end
(Instant AP)# commit apply
Associate Server Profiles to a Network Profile
To associate the authentication server profiles with a network profile:
1. Access the WLAN wizard or the Wired Settings window.
l To open the WLAN wizard, select an existing SSID on the Network tab, and click edit.
l To open the wired settings window, click More > Wired. In the Wired window, select a profile and click
Edit.
You can also associate the authentication servers when creating a new WLAN or wired profile.
2. Click the Security tab.
3. If you are configuring the authentication server for a WLAN SSID, on the Security tab, move the slider to
Enterprise security level.
4. Ensure that an authentication type is enabled.
5. From the Authentication Server 1 drop-down list, select the server name on which dynamic RADIUS
proxy parameters are enabled. You can also create a new server with RADIUS and RADIUSproxy
parameters by selecting New.
6. Click Next and then click Finish.
7. To assign the RADIUSauthentication server to a network profile, select the newly added server when
configuring security settings for a wireless or wired network profile.
You can also add an external RADIUSserver by selecting New for Authentication Server when configuring a
WLAN or wired profile. For more information, see Configuring Security Settings for a WLAN SSID Profile on
page 90 and Configuring Security Settings for a Wired Profile on page 110.
In the CLI
To associate an authentication server to a WLAN SSID:
(Instant AP)(config)# wlan ssid-profile <name>
(Instant AP)(SSID Profile <name>)# auth-server <server-name>
(Instant AP)(SSID Profile <name>)# end
((Instant AP)# commit apply
To associate an authentication server to a wired profile:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# auth-server <name>
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply
Understanding Encryption Types
Encryption is the process of converting data into a cryptic format or code when it is transmitted on a network.
Encryption prevents unauthorized use of the data.
Instant supports the following types of encryption:
l WEP—Wired Equivalent Privacy (WEP) is an authentication method where all users share the same key. WEP
is not as secure as other encryption types such as TKIP.
l TKIP—Temporal Key Integrity Protocol (TKIP) uses the same encryption algorithm as WEP. However, TKIP is
more secure and has an additional message integrity check (MIC).