Users Guide

212 | Remote Access Points Dell PowerConnect W-Series ArubaOS 6.1 | User Guide
Figure 34 Enable Restricted Access to LD Homepage
Configuring the AAA Profile and the Virtual AP Profile
After you configure the session ACL, you define the AAA profile and virtual AP used for split tunneling. When
defining the AAA parameters, specify the previously configured user role that contains the session ACL used for
split tunneling.
Using the WebUI
1. Navigate to the Security > Authentication > AAA Profiles page. From the AAA Profiles Summary list, click
Add.
2. Enter the AAA profile name, then click Add.
3. Select the AAA profile that you just created:
a. For 802.1X Authentication Default Role, select the user role you previously configured for split tunneling,
then click Apply.
b. Under the AAA profile that you created, locate 802.1x Authentication Server Group, and select the
authentication server group to use, then click Apply.
If you need to create an authentication server group, select new and enter the appropriate parameters.
Using CLI
aaa profile <name>
authentication-dot1x <dot1x-profile>
dot1x-default-role <role>
dot1x-server-group <group>
Configuring split tunneling in the virtual AP profile
1. Navigate to Configuration > Wireless > AP Configuration page. Select either the AP Group or AP Specific
tab. Click Edit for the applicable AP group name or AP name.
2. Under Profiles, select Wireless LAN, then Virtual AP.
3. To create a new virtual AP profile in the WebUI, select New from the Add a profile drop-down menu. Enter
the name for the virtual AP profile, and click Add.
a. In the Profile Details entry, go to the AAA Profile drop-down list and select the previously configured AAA
profile. The AAA Profile pop-up window appears.
b. To set the AAA profile and close the window, click Apply.
NOTE: Whenever you create a new virtual AP profile in the WebUI, the profile automatically contains the “default” SSID profile
with the default ESSID. You must configure a new ESSID and SSID profile for the virtual AP profile before you apply the profile.