Administrator Guide

501 | Virtual APs Dell Networking W-Series ArubaOS 6.4.x| User Guide
Parameter Description
Device Type Classification When you select this option, the controller will parse user-agent
strings and attempt to identify the type of device connecting to the
AP. When the device type classification is enabled, the Global client
table shown in the Monitoring>Network > All WLAN Clients
window shows each client’s device type, if that client device can be
identified.
Enforce DHCP When you select this option, clients must obtain an IP using DHCP
before they are allowed to associate to an AP. Enable this option
when you create a user rule that assigns a specific role or VLAN
based upon the client device’s type. For details, see Working with
User-Derived VLANs on page 448.
NOTE: If a client is removed from the user table by the “Logon user
lifetime” AAA timer, then that client will not be able to send traffic
until it renews it’s DHCP.
NOTE: Enforce DHCP is available on the controller for APs
configured for tunnel or decrypt-tunnel forwarding mode only.
PAN firewalls Integration Requires IP mapping at Palo Alto Networks firewalls. For details, see
Palo Alto Networks Firewall Integration on page 714.
7. In the profiles list, select the AAA profile to expand the list of other profiles associated with that AAAprrofile.
8. Click 802.1X Authentication. The 802.1X Authentication Profile appears.
a. Click the 802.1X Authentication Profile drop-down list and select an authentication profile to
associate with your AAAprofile.
b. Click Apply.
9. Click 802.1X Authentication Server Group. The 802.1X Authentication Server Group appears..
a. Click the 802.1X Authentication Server Group drop-down list and select the server group to
associate with your AAA profile.
b. Click Apply.
10.Click MAC Authentication. The MAC Authentication Profile appears.
a. Click the MAC Authentication Profile drop-down list and select a MAC authentication profile to
associate with your AAAprofile.
b. Click Apply.
11.Click MAC Authentication Server Group. The MAC Authentication Server Group appears.
a. Click the MAC Authentication Server Group drop-down list and select the MAC server group to
associate with your AAA profile.
b. Click Apply.
12.Click RADIUS Authentication Server Group. The RADIUS Authentication Server Group appears.
a. Click the RADIUS Authentication Server Group drop-down list and select the MAC server group to
associate with your AAA profile.
b. Click Apply.
Configuring an AAAProfile in the CLI
(host)(config) #aaa authentication dot1x <profile>
(host)(config) #aaa profile <profile>