Users Guide

Dell PowerConnect W-Series ArubaOS 6.1 | User Guide Virtual APs | 141
 An 802.11a/b/g SSID called “Guest” that uses open system and is only available on the AP “building3-lobby”
(this AP will support both the “Corpnet” and “Guest” SSIDs)
Each WLAN requires a different SSID profile that maps into a separate virtual AP profile. For the SSID
“Corpnet”, which will use WPA2, you need to configure an AAA profile that includes 802.1x authentication and
an 802.1x authentication server group.
Because all APs discovered by the controller belong to the AP group called “default”, you assign the virtual AP
profile that contains the SSID profile “Corpnet” to the “default” AP group. For the “Guest” SSID, you configure
a new virtual AP profile that you assign to the AP named “building3-lobby”. Table 28 lists the profiles that you
need to modify or create for these examples.
Configuring the WLAN
In this example WLAN, users are validated against a corporate database on a RADIUS authentication server
before they are allowed access to the network. Once validated, users are placed into a specified VLAN (VLAN 1 in
this example) and assigned the user role “employee” that permits access to the corporate network.
Follow the steps below to configure the Corpnet WLAN. Each of these steps are described in further detail later
in this document.
1. Configure a policy for the user role employee and configure the user role employee with the specified policy.
2. Configure RADIUS authentication servers and assign them to the corpnet 802.1x authentication server
group.
3. Configure authentication for the WLAN.
a. Create the corpnet 802.1x authentication profile.
b. Create the AAA profile corpnet and specify the previously-configured employee user role for the 802.1x
authentication default role.
c. Specify the previously-configured corpnet 802.1x authentication server group.
4. For the AP group “default”, create and configure the virtual AP corpnet.
a. Create a new virtual AP profile corpnet.
b. Select the previously-configured corpnet AAA profile for this virtual AP.
c. Create a new SSID profile corpnet to configure “Corpnet” for the SSID name and WPA2 for the
authentication.
Table 28 Profiles for Example Configuration
AP Group/Name Virtual AP Profile SSID Profile AAA Profile
“default” “corpnet”
 VLAN: 1
 SSID profile: “corpnet”
 AAA profile: “corpnet”
“corpnet”
 SSID: Corpnet
 WPA2
“corpnet”
 802.1x authentication default role:
“employee”
 802.1x authentication server group:
“corpnet”
- Radius1
- Radius2
“building3-lobby” “guest”
 VLAN: 2
 Deny Time Range
 SSID profile: “guest”
 AAA profile: “default-open”
“guest”
 SSID: Guest
 Open system
“default-open”
(This is a predefined, read-only AAA profile
that specifies open system authentication)
NOTE: Dell recommends that you assign a unique name to each virtual AP, SSID, and AAA profile that you modify. In this example,
you use the name “corpnet” to identify each of the profiles.