AirWave Wireless Management Suite | Configuration Guide Aruba Configuration Reference | 75
3. Click Add or Save. The added or edited Management Auth profile appears on the AAA Profiles page, and
on the
Management Auth details page.
Profiles > AAA > 802.1x Auth
802.1x authentication consists of three components:
z The supplicant, or client, is the device attempting to gain access to the network. You can configure the
Aruba user-centric network to support 802.1x authentication for wired users as well as wireless users.
z The authenticator is the gatekeeper to the network and permits or denies access to the supplicants. The
Aruba controller acts as the authenticator, relaying information between the authentication server and
supplicant. The EAP type must be consistent between the authentication server and supplicant and is
transparent to the controller.
z The authentication server provides a database of information required for authentication and informs
the authenticator to deny or permit access to the supplicant.
The 802.1x authentication server is typically an EAP-compliant Remote Access Dial-In User Service
(RADIUS) server which can authenticate either users (through passwords or certificates) or the client
computer.
An example of an 802.1x authentication server is the Internet Authentication Service (IAS) in Windows (see
http://technet2.microsoft.com/windowsserver/en/technologies/ias.mspx).
In Aruba user-centric networks, you can terminate the 802.1x authentication on the controller. The
controller passes user authentication to its internal database or to a “backend” non-802.1x server. This
feature, also called “AAA FastConnect,” is useful for deployments where an 802.1x EAP-compliant RADIUS
server is not available or required for authentication.
Perform these steps to configure an
802.1X Auth profile.
1. Click
Profiles > AAA > 802.1x Auth in the Aruba Navigation pane. The details page summarizes the
current profiles of this type.
2. Click the
Add button to create a new 802.1x Auth profile, or click the pencil icon next to an existing
profile to edit that profile. The
Details page appears. Complete the settings as described in Table 17:
Referenced Profiles
Server Group N/A Select the AAA authentication server group. Click the pencil icon to
edit an existing server group or click the add icon to create a new
server group.
Other Settings
Default Role ap-role The role to be associated with this authentication profile.
Enable No When enabled with Yes, this setting activates the authentication
server.
Table 16 Aruba Configuration > Profiles > AAA > Management Auth Profile Settings
Field Default Description
To Next Page
Loading...
