Reference Guide

44 | aaa authentication wispr Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide
If you are hotstpot operator using WISPr authentication, and a client that has an account with your ISP attempts
to access the Internet at your hotspot, then your ISP’s WISPr AAA server authenticates that client directly, and
allows the client access on the network. If, however, the client only has an account with a partner ISP, then your
ISP’s WISPr AAA server forwards that client’s credentials to the partner ISP’s WISPr AAA server for
authentication. Once the client has been authenticated on the partner ISP, it is authenticated on your hotspot’s
own ISP, as per their service agreements. Once your ISP sends an authentication message to the controller, the
controller assigns the default WISPr user role to that client.
ArubaOS supports the following smart clients, which enable client authentication and roaming between hotspots
by embedding iPass Generic Interface Specification (GIS) redirect, proxy, authentication and logoff messages
within HTLM messages to the controller.
 iPass
 Bongo
 Trustive
 weRoam
 AT&T
A WISPr authentication profile includes parameters to define RADIUS attributes, the default role for
authenticated WISPr users, maximum numbers of authenticated failures and logon wait times. The WISPr-
Location-ID sent from the controller to the WISPr RADIUS server is the concatenation of the ISO Country
Code, E.164 Country Code, E.164 Area Code and SSID/Zone parameters configured in this profile
The parameters to define WISPr RADIUS attributes are specific to the RADIUS server your ISP uses for WISPr
authentication; contact your ISP to determine these values. You can find a list of ISO and ITU country and area
codes at the ISO and ITU websites (www.iso.org and http://www.itu.int.)
Example
The following commands configure an WISPr authentication profile:
aaa authentication wispr
default-role authuser
max-authentication-failure 5
server-group wispr1
wispr-location-id-ac 408
wispr-location-id-cc 1
wispr-location-id-isocc us
wispr-location-id-network <wispr-location-id-network>
wispr-location-name-location <wispr-location-name-location>
wispr-location-name-operator-name <wispr-location-name-location>
Command History
This command was available in ArubaOS 3.4.1.
Command Information
Note: A Boingo smart client uses a NAS identifier in the format <CarrierID>_<VenueID> for location identification. To support
Boingo clients, you must also configure the NAS identifier parameter in the Radius server profile for the WISPr server
Platforms Licensing Command Mode
All platforms Base operating system Config mode on master or local controllers