Users Guide

202 | Remote Access Points Dell PowerConnect W-Series ArubaOS 6.1 | User Guide
c. Under Destination, select any.
d. Under Service, select any.
e. Under Action, select route, and select the src-nat checkbox.
f. Click Add.
7. Click Apply
.
8. Click the User Roles tab.
a. Click Add.
b. Enter the Role Name.
c. Click Add under Firewall Policies.
d. In the Choose from Configured Policies menu, select the policy you just created.
e. Click Done.
Using the WebUI to configure the AAA profile
1. Navigate to the Security > Authentication > AAA Profiles page. From the AAA Profiles Summary list, click
Add.
2. Enter the AAA profile name, then click Add.
3. Select the AAA profile that you just created:
a. For Initial role, select the user role you just created.
b. For 802.1X Authentication Default Role, select the appropriate role for your remote AP configuration,
then click Apply.
c. Under the AAA profile that you created, locate 802.1x Authentication Server Group, and select the
authentication server group to use for your remote AP configuration, then click Apply.
d. Under the AAA profile that you created, locate 802.1X Authentication Profile, and select the profile to use
for your remote AP configuration, then click Apply.
Using the WebUI to define the backup configuration
1. Navigate to the Configuration > Wireless > AP Configuration page. Select either the AP Group or AP
Specific tab. Click Edit for the AP group or AP name.
2. Under Profiles, select Wireless LAN, then Virtual AP.
3. To create a new virtual AP profile in the WebUI, select New from the Add a profile drop-down menu. Enter
the name for the virtual AP profile, and click Add.
a. In the Profile Details entry for the new virtual AP profile, go to the AAA Profile drop-down list and select
the previously configured AAA profile. The AAA Profile pop-up window appears.
NOTE: If you use a local DHCP server to obtain IP addresses, you must define one additional ACL to permit traffic between clients
without source NATing the traffic. Add user alias internal-network any permit before any any any route src-nat.
NOTE: If you need to create an 802.1x authentication server group, select new from the 802.1X Authentication Server Group drop-
down list, and enter the appropriate parameters.
NOTE: Whenever you create a new virtual AP profile in the WebUI, the profile automatically contains the “default” SSID profile
with the default ESSID. You must configure a new ESSID and SSID profile for the virtual AP profile before you apply the profile.