AirWave Wireless Management Suite | Configuration Guide Aruba Configuration Reference | 81
3. Click Add or Save. The added or edited profile appears on the Stateful NTLM Auth page, and on the
details page.
Profiles > AAA > WISPr Auth
The Wireless Internet Service Provider roaming (WISPr) protocol allows users to roam between service
providers. A RADIUS server is used to authenticate subscriber credentials.
ArubaOS supports stateful 802.1x authentication, stateful NTLM authentication and authentication for
Wireless Internet Service Provider roaming (WISPr). Stateful authentication differs from 802.1x
authentication in that the controller does not manage the authentication process directly, but monitors the
authentication messages between a user and an external authentication server, and then assigns a role to
that user based upon the information in those authentication messages. WISPr authentication allows clients
to roam between hotspots using different ISPs.
Refer to the AOS User Guide for additional information about stateful NTLM and WISPr authentication.
Perform these steps to configure a
WISPr Auth profile.
1. Click
Profiles > AAA > WISPr Auth in the Aruba Navigation pane. The details page summarizes the current
profiles of this type.
2. Click the
Add button to create a new Stateful NTLM Auth profile, or click the pencil icon next to an existing
profile to edit that profile. The
Details page appears. Complete the settings as described in Table 18:
Table 18 Aruba Configuration > Profiles > AAA > Stateful NTLM Auth Profile Settings
Field Default Description
General Settings
Folder Top Use this field to set and display the folder with which the profile is
associated. The drop-down menu displays all folders available for
association with the profile.
Folders provide a way to organize the visibility of device parameters that is
separate from the configuration groups of devices. Using folders, you can
view basic statistics about device, and define which users have visibility to
which device parameters.
Name Blank Enter the name of the profile.
Other Settings
Timeout 10 Set the aging out or timeout period, which is the amount of time for which
the user sends no traffic. The user’s role remains authenticated unless this
period of time is exceeded.
Server Group default Select a server from the drop-down menu. You can edit servers with the
Pencil icon or add additional servers with the Add icon.
Default Role guess Select a user role to associate with the user from the drop-down menu.
You can edit roles with the Pencil icon or add additional roles with the Add
icon.