Users Guide

106 | Access Points Dell PowerConnect ArubaOS 5.0 | [User Guide
Wireless LAN Profiles
The Wireless LAN collection of profiles configure WLANs in the form of virtual AP profiles. A virtual AP profile
contains an SSID profile which defines the WLAN, the high-throughput SSID profile, and an AAA profile that
defines the authentication for the WLAN.
Unlike other profile types, you can configure and apply multiple instances of virtual AP profiles to an AP group or
to an individual AP.
z 802.11k profile—Manages settings for the 802.11k protocol. The 802.11k protocol allows APs and clients to
dynamically query their radio environment and take appropriate connection actions. For example: In a
802.11k network if the AP with the strongest signal reaches its CAC (Call Admission Control) limits for voice
calls, then on-hook voice clients may connect to an under utilized AP with a weaker signal. You can configure
the following options in 802.11k profile:
z Enable or disable 802.11K support on the AP
z Forceful disassociation of on-hook voice clients
z Measurement mode for beacon reports.
For more details, see “Configuring 802.11k Protocol” on page127.
z SSID profile—Configures network authentication and encryption types. This profile also includes references
to the EDCA (enhanced distributed channel access) Parameters Station Profile, the EDCA Parameters AP
Profile and a High-throughput SSID profile.
Use this profile to configure basic settings such as 802.11 authentication and encryption settings, or advanced
settings such as DTIM (delivery traffic indication message) intervals, 802.11a/802.11g basic and transmit
rates, DHCP settings and WEP keys. The advanced SSID profile settings allows you to deny broadcast probes
and hide the SSID.
z High-throughput SSID profile—High-throughput APs support additional settings not available in legacy
APs. A High-throughput SSID profile enables/disables high-throughput (802.11n) features with 40 Mhz
channel usage, and define values for aggregated MAC protocol data units (MDPUs) and Modulation and
Coding Scheme (MCS) ranges. If none of the APs in your Mesh deployment are 802.11n-capable, you do not
need to configure a high-throughput SSID profile. If you modify a currently provisioned and running high-
throughput SSID profile, your changes take affect immediately; rebooting is not required.
z Virtual AP profile—This profile defines your WLAN by enabling or disabling the bandsteering, fast roaming
and DoS prevention features. It defines radio band, forwarding mode and blacklisting parameters, and
includes references to an AAA Profile, 802.11K Profile, and a High-throughput SSID profile.
z AAA profile—This defines authentication settings for the WLAN users, including the role for
unauthenticated users, and the different roles that should be assigned to users authenticated via 802.1x, MAC
or SIP authentication. This profile includes references to:
z MAC Authentication Profile
z MAC Authentication Server Group
z 802.1X Authentication Profile
z 802.1X Authentication Server Group
z RADIUS Accounting Server Group
For details on configuring an AAA profile, see “AAA Profile Parameters” on page118.
Caution: Configuring the 802.11a and 802.11g beacon rates should only be used in conjunction with Distributed Antenna Systems
(DAS). Configuring beacon rates during normal operation may cause connectivity problems.
Note: You can apply multiple virtual AP profiles to an AP group or to an individual AP; for most other profiles, you can apply only
one instance of the profile to an AP group or AP at a time.