Filter
Top Products
d. For 802.1x Authentication Default Role, select a configured user role (for example, employee).
e. Click Apply.
f. In the AAA Profile list, select 802.1x Authentication Profile under the AAA profile you configured. Select the
applicable 802.1x authentication profile (for example, xsec-wireless-dot1x). Click Apply.
g. In the AAA Profile list, select 802.1x Authentication Server Group under the AAA profile you configured.
Select the applicable server group (for example, xsec-svrs). Click Apply.
2. Navigate to the Configuration > Wireless > AP Configuration page. Select either the AP Group or AP Specific
tab. Click Edit for the applicable AP group name or AP name.
3. Under Profiles, select Wireless LAN, then select Virtual AP.
4. To create a new virtual AP profile, select NEW from the Add a profile drop-down menu. Enter the name for the
virtual AP profile (for example, xsec-wireless), and click Add.
a. In the Profile Details entry for the new virtual AP profile, select the AAA profile you previously configured. A
pop-up window displays the configured AAA profile parameters. Click Apply in the pop-up window.
b. From the SSID profile drop-down menu, select NEW. A pop-up window allows you to configure the SSID
profile.
c. Enter the name for the SSID profile (for example, xsec-wireless).
d. Enter the Network Name for the SSID (for example, xsec-ap).
e. For Network Authentication, select xSec.
f. Click Apply in the pop-up window.
g. At the bottom of the Profile Details page, click Apply.
5. Click on the new virtual AP name in the Profiles list or in Profile Details to display configuration parameters.
a. Make sure Virtual AP enable is selected.
b. For VLAN, enter the ID of the VLAN in which authenticated xSec clients are placed (for example, 20).
c. Click Apply.
In the CLI
aaa profile xsec-wireless
authentication-dot1x xsec-wireless-dot1x
d>ot1x-default-role employee
d>ot1x-server-group xsec-svrs
wlan ssid-profile xsec-wireless
essid xsec-ap
opmode xSec
wlan virtual-ap xsec-wireless
vlan 20
aaa-profile xsec-wireless
ssid-profile xsec-wireless
Securing Wired Clients
The following are the basic steps for configuring the controller for xSec wired clients:
1. Configure the VLAN to which the authenticated clients will be assigned. See Network Configuration Parameters
on page 108 for information.
This VLAN must have an IP interface, and is a different VLAN from the port’s “native” VLAN that provides
connectivity to the network.
2. Configure the user role for the authenticated xSec clients. See Roles and Policies on page 296 for information.
3. Configure the server group that will be used to authenticate clients using 802.1x. See Authentication Servers on
page 168 for more information.
DellPowerConnectW-SeriesArubaOS6.2 | User Guide AdvancedSecurity | 672