Users Guide

d. For 802.1X Authentication Default Role, select a configured user role (for example, employee).
e. Click Apply.
f. In the AAA Profile list, select 802.1X Authentication Profile under the AAA profile you configured. Select
the applicable 802.1X authentication profile (for example, xsec-wireless-dot1x). Click Apply.
g. In the AAA Profile list, select 802.1X Authentication Server Group under the AAA profile you configured.
Select the applicable server group (for example, xsec-svrs). Click Apply.
2. Navigate to Configuration > Wireless > AP Configuration. Select either the AP Group or AP Specific
tab. Click the applicable AP group name.
3. Under Profiles, select Wireless LAN, then select Virtual AP.
4. To create a new virtual AP profile, select NEW from the Add a profile drop-down menu. Enter the name for
the virtual AP profile (for example, xsec-wireless), and click Add.
a. In the Profile Details entry for the new virtual AP profile, select the AAA profile you previously
configured. A pop-up window displays the configured AAA profile parameters. Click Apply in the pop-up
window.
b. From the SSID profile drop-down menu, select NEW. A pop-up window allows you to configure the SSID
profile.
c. Enter the name for the SSID profile (for example, xsec-wireless).
d. Enter the Network Name for the SSID (for example, xsec-ap).
e. For Network Authentication, select xSec.
f. Click Apply.
g. At the bottom of the Profile Details page, click Apply.
5. Click on the new virtual AP name in the Profiles list or in Profile Details to display configuration parameters.
a. Make sure Virtual AP enable is selected.
b. For VLAN, enter the ID of the VLAN in which authenticated xSec clients are placed (for example, 20).
c. Click Apply.
In the CLI
To configure the AAA profile and virtual AP profile:
(host)(config) #aaa profile xsec-wireless
authentication-dot1x xsec-wireless-dot1x
dot1x-default-role employee
dot1x-server-group xsec-svrs
(host)(config) #wlan ssid-profile xsec-wireless
essid xsec-ap
opmode xSec
(host)(config) #wlan virtual-ap xsec-wireless
vlan 20
aaa-profile xsec-wireless
ssid-profile xsec-wireless
Securing Wired Clients
The following are the basic steps for configuring the controller for xSec wired clients:
1. Configure the VLAN to which the authenticated clients will be assigned. See
Network Configuration
Parameters on page 164 for information.
This VLAN must have an IP interface, and is a different VLAN from the port’s “native” VLAN that provides
connectivity to the network.
2. Configure the user role for the authenticated xSec clients. See
Roles and Policies on page 438 for
information.
Dell Networking W-Series ArubaOS 6.4.x | User Guide Advanced Security | 952