Administrator Guide
AAA Profile
Parameter
Action/Description Comments
Open SSID
RADIUS
Accounting
14. Enable this option to have a Network
Access Server (NAS) operate as a client of
the RADIUS accounting server.
The client is responsible for passing user
accounting information to a designated
RADIUS accounting server.
The RADIUS accounting server can act as
a proxy client to other kinds of
accounting servers. Transactions
between the client and the RADIUS
accounting server are authenticated
through the use of a shared secret, which
is never sent over the network.
15. When you are finished with the AAA profile
settings, click Apply.
This completes the AAA profile configuration for 802.1X authentication.
Configuring a Virtual AP Profile
This section contains the following information:
l About Virtual AP Profiles
l Configuring the Virtual AP Profile
About Virtual AP Profiles
Access points (APs) advertise Wireless LANs to wireless clients by sending out beacons and probing responses
that contain the Wireless LAN’s SSID and the supported authentication and data rates. When a wireless client
associates to an AP, it sends traffic to the AP’s Basic Service Set Identifier (BSSID), which is usually the AP’s MAC
address.
In a Dell network, an AP uses a unique BSSID for each Wireless LAN. Thus, a physical AP can support multiple
WLANs. The WLAN configuration applied to a BSSID on an AP is called a virtual AP.
You can configure and apply multiple virtual APs to an AP group or to an individual AP by defining one or more
virtual AP profiles. You can configure virtual AP profiles to provide different network access or services to users
on the same physical network.
l For example, you can configure a Wireless LAN to provide access to guest users and another WLAN to
provide access to employee users through the same APs.
l You can also configure a Wireless LAN that offers open authentication and Captive Portal access with data
rates of 1 MBps and 2 MBps, and another Wireless LAN that requires Wi-Fi Protected Access (WPA)
authentication with data rates of up to 11 MBps.
Example
As an example, suppose there are users in both Edmonton and Toronto that access the same “Corpnet”
Wireless LAN.
If the Wireless LAN required authentication to an external server, users who associate with the APs in Toronto
would want to authenticate with their local servers.
In this case, you can configure two virtual APs that each reference a slightly different AAA profile—one AAA
profile that references authentication servers in Edmonton and the other AAA profile that references servers in
Toronto (see Table 12).
Dell Networking W-ClearPass Deployment Guide
Preparing the Mobility Controller for W-ClearPass PolicyManager Integration
| 79