Dell 6.2 Server User Manual


 
1 = 802.1x authenticated AP; 2 = Using IKE version 2;
Sample Configurations
The following examples show basic configurations on the controller for:
l "Configuring Authentication with an 802.1X RADIUS Server" on page 204
l "Configuring Authentication with the Controller’s Internal Database" on page 214
In the following examples:
l Wireless clients associate to the ESSID WLAN-01.
l The following roles allow different networks access capabilities:
n student
n faculty
n guest
n system administrators
The examples show how to configure using the WebUI and CLI commands.
Configuring Authentication with an 802.1X RADIUS Server
l An EAP-compliant RADIUS server provides the 802.1X authentication. The RADIUS server administrator must
configure the server to support this authentication. The administrator must also configure the server to all
communications with the Dell controller.
l The authentication type is WPA. From the 802.1X authentication exchange, the client and the controller derive
dynamic keys to encrypt data transmitted on the wireless network.
l 802.1x authentication based on PEAP with MS-CHAPv2 provides both computer and user authentication. If a
user attempts to log in without the computer being authenticated first, the user is placed into a more limited
“guest” user role.
Windows domain credentials are used for computer authentication, and the user’s Windows login and password
are used for user authentication. A single user sign-on facilitates both authentication to the wireless network and
access to the Windows server resources.
NOTE: "" on page 842 describes how to configure the Microsoft Internet Authentication Server and Windows XP wireless client to
operate with the controller configuration shown in this section.
Configuring Roles and Policies
You can create the following policies and user roles for:
l Student
l Faculty
l Guest
l Sysadmin
l Computer
Creating the Student Role and Policy
The student policy prevents students from using telnet, POP3, FTP, SMTP, SNMP, or SSH to the wired portion of
the network. The student policy is mapped to the student user role.
DellPowerConnectW-SeriesArubaOS6.2 | User Guide 802.1XAuthentication | 204