Users Guide

3. Enter the cppm_username and cppm_password in the CPPMcredentials option.
4. Click Apply.
In the CLI:
(host)(config) #aaa authentication-server radius
(host)(config) #show aaa authentication-server radius
Configuring an RFC-3576 RADIUS Server
You can configure a RADIUS server to send user disconnect, change-of-authorization (CoA), and session
timeout messages as described in RFC 3576, Dynamic Authorization Extensions to Remote Dial In User Service
(RADIUS).”
For Remote AP, RADIUS CoA is supported on tunnel and split-tunnel forwarding modes only.
For Campus AP, RADIUS CoA is supported on tunnel and decrypt-tunnel forwarding modes only.
The disconnect, session timeout, and change-of-authorization messages sent from the server to the controller
contains information to identify the user for which the message is sent. The controller supports the following
attributes for identifying the users who authenticate with an RFC 3576 server:
l user-name: name of the user to be authenticated
l framed-ip-address: user’s IP address
l calling-station-id: phone number of a station that originated a call
l accounting-session-id: unique accounting ID for the user session.
If the authentication server sends both supported and unsupported attributes to the controller, the unknown
or unsupported attributes are ignored. If no matching user is found, the controller sends a 503: Session Not
Found error message back to the RFC 3576 server.
Using the WebUI
1. Navigate to the Configuration > Security > Authentication > Servers page.
2. Select RFC 3576 Server to display the Radius Server List.
3. To define a new RFC 3576 RADIUS server, enter the IP address for the server and click Add.
4. Select the server name to configure server parameters.
5. Enter the server authentication key into the Key and Retype fields.
6. Click Apply.
The configuration does not take effect until you perform this step.
Using the CLI
(host)(config) #aaa rfc-3576-server <ipaddr>
clone <server>
key <psk>
no ...
Dell Networking W-Series ArubaOS 6.4.x | User Guide Authentication Servers | 259