Users Guide

184 | Remote Access Points Dell PowerConnect ArubaOS 5.0 | User Guide
Using CLI
Use the localip keyword in the user role ACL.
By default, all users have an ACL entry of type
any any deny. This rule restricts access to all users. When the
ACL is configured for a user role, if a
user any permit ACL rule is configured, add a deny ACL before that for
localip for restricting the user from accessing the LD homepage.
Example:
ip access-list session logon-control
user localip svc-http deny
user any permit
Using WebUI
1. Navigate to the Configuration > Security > Access Control > Policies page.
2. Click Add to crete a new policy.
3. Enter the policy name in the Policy Name field.
4. From the Policy Type drop-down list, select IPv4 Session.
5. To create the first rule:
a. Under Rules, click Add.
b. Under Source, select localip.
c. Under Destination, select any.
d. Under Action, select permit.
e. Click Apply.
Figure 31 Enable Restricted Access to LD Homepage
Configuring the AAA Profile and the Virtual AP Profile
After you configure the session ACL, you define the AAA profile and virtual AP used for split tunneling. When
defining the AAA parameters, specify the previously configured user role that contains the session ACL used for
split tunneling.
Using the WebUI
1. Navigate to the Security > Authentication > AAA Profiles page. From the AAA Profiles Summary list, click
Add.
2. Enter the AAA profile name, then click Add.
3. Select the AAA profile that you just created:
a. For 802.1X Authentication Default Role, select the user role you previously configured for split tunneling,
then click Apply.