User's Manual

868 | Advanced Security Dell Networking W-Series ArubaOS 6.4.x| User Guide
a. To create a new AAA profile, click Add.
b. Enter a name for the profile (for example, xsec-3party), and click Add.
c. To configure the AAA profile, click on the newly-created profile name.
d. For 802.1x Authentication Default Role, select a configured user role (for example, employee).
e. Click Apply.
f. In the AAA Profile list, select 802.1x Authentication Profile under the AAA profile you configured. Select
the applicable 802.1x authentication profile (for example, xsec-NonDell-dot1x). Click Apply.
g. In the AAA Profile list, select 802.1x Authentication Server Group under the AAA profile you configured.
Select the applicable server group (for example, xsec-svrs). Click Apply.
3. Navigate to the Configuration > Advanced Services > Wired Access page.
a. Under Wired Access AAA Profile, select the AAA profile you just configured.
b. Click Apply.
In the CLI
interface fastethernet|gigabitethernet slot/port
switchport access vlan 1
xsec vlan 20
aaa profile xsec-wired
authentication-dot1x xsec-NonDell-dot1x
d>ot1x-default-role employee
d>ot1x-server-group xsec-svrs
aaa authentication wired
profile xsec-wired
Securing Clients on an AP Wired Port
APs with multiple wired Ethernet ports include an wired port profile that can enable or disable the wired port,
define an AAA profile for wired port devices, and associate the port with an Ethernet link profile that defines its
speed and duplex values.
In the WebUI
The procedure to create a new Ethernet port configuration profile depends upon whether or not you want to
immediately associate that profile to a specific port on an AP.
1. To configure a new Ethernet port configuration profile without assigning it to a specific port:
a. Navigate to the Configuration > All Profiles page.
b. Expand the AP menu and select AP Wired Port profile.
c. In the Profile Details window, enter a name for the new profile, then click Add.
-or-
To create a new Ethernet port configuration profile for a specific port on an AP or group of APs:
a. Navigate to the Configuration > Wireless > AP Configuration page.
b. Select either the AP Group or AP Specific tab. Click the Edit button by name of the AP group or
individual AP you want to configure.
c. In the Profiles list, expand the APprofile menu and select the Ethernet Interface Port Configuration
profile for the Ethernet port number you want to configure.
d. In the Profile Details window, click the Ethernet interface port configuration drop-down list and
select New.
2. Configure the Ethernet Interface Port/ Wired AP Port Configuration profile parameters described in
Table 186.