Filter
Top Products
2. In the Profiles list, expand the Stateful Kerberos Authentication Profile.
3. To define settings for an
existing
profile, click that profile name in the profiles list.
To create and define settings for a
new
Stateful Kerberos Authentication profile, select an existing profile, then
click the Save Asbutton in the right window pane. Enter a name for the new profile in the entry field. at the top
of the right window pane.
4. Click the Default Role drop-down list, and select the role to be assigned to all users after they complete stateful
Kerberos authentication.
5. Specify the timeout period for authentication requests, from 1-20 seconds. The default value is 10 seconds.
6. Click Apply.
7. In the Profiles list, select the Server Group entry below the Stateful Kerberos Authentication profile.
8. Click the Server Group drop-down list and select the group of Windows servers you want to use for stateful
Kerberos authentication.
9. Click Apply.
In the CLI
Use the following commands to configure stateful Kerberos authentication via the command-line interface. The first
set of commands defines the server used for Kerberos authentication, the second set adds that server to a server
group, and the third set of commands associates that server group with the stateful NTLM authentication profile
then defines the profile settings.
(host)(config)# aaa authentication-server windows <windows_server_name>
host <ipaddr>
enable
!
(host)(config)# aaa server-group group <server-group>
auth-server <windows_server_name>
!
(host)(config)# aaa authentication stateful-kerberos
default-role <role>
enable
server-group <server-group>
timeout <seconds>
Configuring WISPr Authentication
A WISPr authentication profile includes parameters to define RADIUS attributes, the default role for authenticated
WISPr users, maximum numbers of authenticated failures and logon wait times. The WISPr-Location-ID sent from
the controller to the WISPr RADIUS server is the concatenation of the ISO Country Code, E.164 Country Code,
E.164 Area Code and SSID/Zone parameters configured in this profile
The parameters to define WISPr RADIUS attributes are specific to the RADIUS server your ISP uses for WISPr
authentication; contact your ISP to determine these values. You can find a list of ISO and ITU country and area
codes at the ISO and ITU websitesg (www.iso.org) and http://www.itu.int.)
In the WebUI
This section describes how to create and configure a new instance of a WISPr authentication profile in the WebUI.
1. Navigate to the Configuration > Security > Authentication > L3 Authentication page.
DellPowerConnectW-SeriesArubaOS6.2 | User Guide | 225