Users Guide

Dell PowerConnect W-Series ArubaOS 6.1 | User Guide Remote Access Points | 197
 All access ports on the remote AP, irrespective of their original forwarding mode will be moved to bridge
forwarding mode.
 Clients will receive IP address from the remote AP's DHCP server.
 Client will have complete access to Remote AP's uplink network. You cannot enforce or modify any access
control policies on the clients connected in this mode.
This section describes the following topics:
 “Configuring the fallback mode” on page197
 “Configuring the DHCP Server on the Remote AP” on page199
 “Advanced Backup Configuration Options” on page2003
Configuring the fallback mode
To configure the fallback mode, you must
 Configure the AAA profile.
 Configure the virtual AP profile
Using WebUI to configure the AAA profile
The AAA profile defines the authentication method and the default user role for unauthenticated users.
1. Navigate to the Security > Authentication > AAA Profiles page. From the AAA Profiles Summary list, click
Add.
2. Enter the AAA profile name, then click Add.
3. Select the AAA profile that you just created:
a. For Initial role, select the appropriate role (for example, “logon”).
b. For 802.1X Authentication Default Role, select the appropriate role (for example, “default”), then click
Apply.
c. Under the AAA profile that you created, locate 802.1x Authentication Server Group, and select the
authentication server group to use (for example “default”), then click Apply.
d. Under the AAA profile that you created, locate 802.1X Authentication Profile, and select the profile to use
(for example, “default”), then click Apply.
Using CLI
aaa profile <name>
initial-role <role>
authentication-dot1x <dot1x-profile>
dot1x-default-role <role>
dot1x-server-group <group>
NOTE: 802.1x and PSK authentication is supported when configuring bridge or split tunnel mode.
NOTE: If you need to create an 802.1x authentication server group, select new from the 802.1X Authentication Server Group drop-
down list, and enter the appropriate parameters.
NOTE: If you need to create an 802.1x authentication profile, select new from the 802.1X Authentication Profile drop-down list, and
enter the appropriate parameters.