Users Guide

170 | Remote Access Points Dell PowerConnect ArubaOS 5.0 | User Guide
Using WebUI to configure the AAA profile
The AAA profile defines the authentication method and the default user role for unauthenticated users.
1. Navigate to the Security > Authentication > AAA Profiles page. From the AAA Profiles Summary list, click
Add.
2. Enter the AAA profile name, then click Add.
3. Select the AAA profile that you just created:
a. For Initial role, select the appropriate role (for example, “logon”).
b. For 802.1X Authentication Default Role, select the appropriate role (for example, “default”), then click
Apply.
c. Under the AAA profile that you created, locate 802.1x Authentication Server Group, and select the
authentication server group to use (for example “default”), then click Apply.
d. Under the AAA profile that you created, locate 802.1X Authentication Profile, and select the profile to use
(for example, “default”), then click Apply.
Using CLI
aaa profile <name>
initial-role <role>
authentication-dot1x <dot1x-profile>
dot1x-default-role <role>
dot1x-server-group <group>
Using the WebUI to configure virtual AP profile
To configure virtual AP profile:
 Set the remote AP operation to “always,” “backup,” or “persistent.”
 Create and apply the applicable SSID profile.
The SSID profile for the backup configuration in always, backup, or persistent mode must be a bridge
SSID. When configuring the virtual AP profile, specify forward mode as “bridge.”
The SSID profile for the backup configuration in standard mode can be a bridge, tunnel, or split tunnel
SSID. When configuring the virtual AP profile, specify forward mode as “bridge,” “tunnel,” or “split
tunnel.”
1. Navigate to the Configuration > Wireless > AP Configuration page. Select either the AP Group or AP
Specific tab. Click Edit for the AP group or AP name.
2. Under Profiles, select Wireless LAN, then Virtual AP.
Note: 802.1x and PSK authentication is supported when configuring bridge or split tunnel mode.
Note: If you need to create an 802.1x authentication server group, select new from the 802.1X Authentication Server Group drop-
down list, and enter the appropriate parameters.
Note: If you need to create an 802.1x authentication profile, select new from the 802.1X Authentication Profile drop-down list, and
enter the appropriate parameters.
Note: When creating a new virtual AP profile In the WebUI, you can also configure the SSID at the same time. For information
about AP profiles, see “Configuring Profiles” on page105 in Chapter 4, “Access Points” .