Administrator Guide

using 802.1x. You can provision an AP to act as an 802.1X supplicant and authenticate to the infrastructure
using the PEAP protocol.
Both Campus APs (CAPs) and Remote APs (RAPs) can be provisioned to use 802.1X authentication.
Prerequisites
l An AP has to be configured with the credentials for 802.1X authentication. These credentials are stored
securely in the AP flash.
l The AP must complete the 802.1X authentication before it sends or receives IP traffic such as DHCP.
If the AP cannot complete 802.1x authentication (explicit failure or reply timeout) within 1 minute, the AP will proceed
to initiate the IP traffic and attempt to contact the controller. The infrastructure can be configured to allow this. If the
AP contacts the controller it will be marked as unprovisioned so that the administrator can take corrective action.
Provisioning an AP as an 802.1X Supplicant
This section describes how an AP can be provisioned as an 802.1X supplicant using CLI or the WebUI.
In the WebUI
1. Navigate to the Configuration > Wireless > AP Installation > Provisioning window. The list of
discovered APs are displayed on this page.
2. Select the AP you want to provision.
3. Click Provision. The provisioning window opens.
4. Select the 802.1x Parameters using PEAP checkbox and enter the following credentials:
a. User Name: Enter the username of the AP in the User Name field.
b. Password: Enter the password of the AP in the Password field.
5. Enter the password again in the Confirm Password field and reconfirm it.
6. Click Apply and Reboot (at the bottom of the page).
In the CLI
(host) (config)# provision-ap
(host) (AP provisioning) # apdot1x-username <username>
(host) (AP provisioning) # apdot1x-passwd <password>
(host) (AP provisioning) # reprovision ap-name <apname>
To view the 802.1x authentication details on the controller:
(host) # show ap active
Sample Configurations
The following examples show basic configurations on the controller for:
l Configuring Authentication with an 802.1X RADIUS Server on page 339
l Configuring Authentication with the Controller’s Internal Database on page 348
In the following examples:
l Wireless clients associate to the ESSID WLAN-01.
l The following roles allow different networks access capabilities:
n student
n faculty
Dell Networking W-Series ArubaOS 6.4.x | User Guide 802.1X Authentication | 338