Dell PowerConnect W-Clearpass 100 Software Integration Cheat Sheet
Contents
1. 2 Stop RADIUS Server Server Control Server Debug RADIUS Server Configuration na Run the local RADIUS server and see detailed log output Authentication Detabene List View Failed Authentications TPP View a list of recent failed authentications Dictionary NAS List 2 Test RADIUS Authentication Check a username and password or verify the RADIUS attributes User Roles N for a user role Web Logins a RADIUS Server Time The RADIUS server time is currently Thu Dec 16 18 13 10 2010 0800 Support Services a RADIUS Log Snapshot The most recent entries in the RADIUS server log file are shown below Thu Dec 16 17 13 29 2010 Auth Login OK steve arubanetworks com from client apollo port 0 cli 5855CAF59251 Thu Dec 16 15 30 27 2010 Auth Login OK steve arubanetworks com from client apollo port 0 cli DBA2Z5E6E8CF5 Thu Dec 16 15 30 19 2010 Auth Login OK mhyson arubanetworks com from client apollo port 0 cli 00216A7F431E Thu Dec 16 15 18 45 2010 Auth Login OK cjoseph arubanetworks com from client apollo port 0 cli 5855CAF5302D Thu Dec 16 13 57 52 2010 Info Ready to process requests Thu Dec 16 13 57 52 2010 Info rim_sql sql Attempting to connect to amigopod localhost 5432 amigopod Thu Dec 16 13 57 52 2010 Info rim_sql sql Driver rim_sql_postgresq module rim sq postgresq loaded and linked Thu Dec 16 13 57 52 2010 Info rim_exec Wait yes but no output defined Did you mean out2. Monitoring Configuration Diaonostics Maintenance Plan Events Reports Save Configuration Logout admin Network EEPE Security gt Authentication gt L3 Authentication VLANs Servers AAA Profiles L2 Authentication L3 Authentication User Rules Advanced Ports IP a RAIE E Captive Portal Authentication Profile Captive Portal Authentication Profile gt amigopod cp Save As Reset Authentication igop eee rn aiii Default Role Redirect Pause 1 sec Wireless z 5 User Login wv Guest Login O AP Configuration default AP Installation Logout popup window Iv Use HTTP for authentication E VPN Authentication Profile ari Logon wait minimum wait 5 sec Logon wait maximum wait 10 sec Administration logon wait CPU utilization threshold 60 Max Authentication failures 0 m Certificates Show FQDN I Use CHAP non standard a SNMP le Sygate on demand agent 1 ja Login page i 9 20 Clock Welcome page auth welcome html Show Welcome Page Iv Advanced Services Proxy Server Configuration IP Mobility Wired Access Wireless All Profiles ith Aruba Networks E mail Support For example we could set these pages to the following Login Page https lt Amigopod IP Address or FQDN gt Aruba_login php Welcome Page https lt Amigopod IP Address or FQDN gt Aruba_welcome php These URLs will be defined on the Amigopod in a later step as part of the Web Login configuration Note Based on your cu
3. le nn ize X i PIAR a i i tiie Uy ig FT F matt nm TARAF SED thy 4f 4 irre N i tf PERN VW i hy if thy if Mi Wiis tty ArubaOS Amigopod Integration Cheat Sheet p FOR ARUBA NETWORKS EMPLOYEES CUSTOMERS AND PARTNERS E o A ArubaOS Amigopod Integration Cheet Sheet Table of Contents 1 Create RADIUS Server INSCANGCS 5 aura enderne nere EEE REE een 3 2 Add RADIUS Server to a Server Group ssensosssnsensssoserusonsonsensoroseosuonsossennenosrosuonsonsosssnnerossosuensessenns 3 3 Create Captive Portal Profile eee arr eee Eee E E 4 4 Configure Authentication for Captive Portal Profile sssessesessseseeserssresrererrsrresrrsersrerereserereesersreseene 5 De CEE RAD OMS eae E E E E A EE 6 6 Enable Captive Portal on Initial Role of Captive Portal Profile sessssesesesseserseresrenerreressrseresrrrsrreresss 7 7 Ensure the Amigopod IP Address allowed in captiveportal policy ccccceeccsssceseseeceeeseeeeseeeeeeeees 8 8 Configure Guest VAP with new AAA Profile sssnsssnsssesssesssesssrssresssesssersressresserssrersressressrerseerseerseere 9 9 Configure RADIUS NAS for Aruba Controller sesssssesssenssensserssessserssrrssrrserrsserserrsrersressrerseerseerseeeseee 10 10 Configure Web Login for Captive Portal Authentication eesessssssesessessrssreseerererrresersrereerererereserseens 11 11 Configure RADIUS User Rolle
4. The Pre Auth Check is only required for Advanced configurations where you might need to ensure the username and password pair is valid before initiating the RADIUS transaction from the Aruba Controller Given the Web Login and RADIUS database is hosted on the same appliance we can perform a query locally prior to firing a RADIUS transaction You can enable the display of an Accept Terms amp Conditions option of the login page if required This refers to the default T amp Cs URL defined under Guest Manager gt Customization gt Customize Guest Manager external terms html The URL of a terms and conditions page If non blank this will enable a Terms Of Use URL terms of use checkbox on the create account page which must be checked in order to create a new account The URL here is specified as the terms of use and is opened in a new window Unfortunately as of ArubaOS 6 x there is an issue default the Default Destination capability shown in the Web Login configuration This option is designed to allow you to define an override URL that the wireless wired user is sent to post authentication The obvious work around this issue is to set the post authentication URL in the Welcome Page of the ArubaOS Captive Portal Profile You can leverage the Amigopod skin technology to quickly brand the Captive Portal displayed to the wireless wired users These skins are available as a professional service as a purchasable SKU or there are also Cust
5. ccccssscssssccsesecssscsensscecesensusesensccecesensusetenseseeesesseseseusesenesensusesens 15 13 Check RADIUS Accounting is working as CXPECTE cccccecceseceesccencceeecceuceeseceeeseeeeeeneeeeeeeeneeeeesss 17 14 ToupleshootNe TIOS reese E E E E REESE 18 Sr eee Se ArubaOS Amigopod Integration Cheet Sheet 1 Create RADIUS Server instance The core of Amigopod is a RADIUS server so the basis of the integration in ArubaOS is the full AAA config Amigopod uses the default ports of 1812 for Authentication and 1813 for Accounting A MOBILITY CONTROLLER aruba620 network Wizards Security gt Authentication gt Servers AP Wizard Controller Wizard Servers AAA Profiles L2 Authentication L3 Authentication User Rules Advanced WLAN LAN Wizard License Wizard E Server Group RADIUS Server gt Guest Auth Show Reference Save As Reset RADIUS Server Controller VLANs Guest Auth Host 110 0 20 58 Key Retype AAA 6U PS Ul dlc lt k lll l l C C loses Uplink LDAP Server Auth Port 1812 Acct Port IP Internal DB P 5 rity Retransmits 3 Timeout sec Authentication SE taac ating Sener NAS ID Aruba620 NAS IP 10 0 20 45 Access Control Use MDS B Mode M AP Configuration AP Installation Management General Administration Certificates SNMP Logging Clock 2 Add RADIUS Server to a Server Group Add the newly crea
6. Tips Test device is not being redirected to the Amigopod Captive Portal e Check DNS resolution as client will not be redirected if it can t resolve initially requested webpage e Check the captiveportal policy and ensure traffic is permitted to the Amigopod IP Address for the redirect via HTTP or HTTPS e Does the amigopod have a route back to the test client s address space look at use of NAT default gateway of Amigopod etc Login process stalls and never receive RADIUS request from Aruba Controller in logs e Check the Web Login page and ensure correct IP address for controller is configured e Check the captiveportal policy and ensure traffic is permitted to configured IP address of the controller in the step above Receiving error message in RADIUS Logs about unknown client e Check the RADIUS NAS List and make sure there is an entry present that matches the IP address listed in the error message Aruba Controller maybe using loopback instead of interface address as source for RADIUS traffic e Make sure you restarted the RADIUS Server after you added the new RADIUS NAS entry for the Aruba controller e Run test RADIUS authentication from the Aruba Controller to ensure basic connectivity using UDP 1812 1813 Receiving error message in RADIUS Logs about login incorrect e Check the username and password has been entered correctly reset password if required e Check that the shared secrets are the same on both Amigo
7. i B z Advanced Services JE Eee B coe el a a Bj Redundancy IP Mobility Apply Wired Access dee eee ee RER Wireless Commands View Commands Assuming all this setup correctly the Aruba Controller should now be attempting to redirect to the Amigopod hosted Web Login page The next steps are to setup the corresponding components on the Amigopod configuration te mm ArubaOS Amigopod Integration Cheet Sheet 9 Configure RADIUS NAS for Aruba Controller An entry for the Aruba Controller needs to be created under the Amigopod RADIUS Services NAS List The NAS Type should always be set for Aruba RFC 3576 to allow the Amigopod to enable the support for RADIUS Dynamic Authorization As usual the shared secret must match on the Amigopod and the ArubaOS RADIUS Server definition a OA Am People Move Networks Must Follow networks Home RADIUS Network Access Servers Aruba Networks Each network access server that will use this RADIUS server for authentication or accounting purposes should be defined here s Help Guest Manager gt a Quick Help Hotspot Manager gt Reporting Manager gt IN Aruba 6000 ame A descriptive name for the network access server NAS This name is used to identify each NAS Administrator gt IP Add 10 0 20 58 ress RADIUS Services gt The IP address or hostname of the network access server Aruba RFC 3576 support B Start Here NAS Type ep Select the type of N
8. is defined in the captiveportal policy can be modified easily through the CLI or GUI It is handy to define the Amigopod appliance in an alias definition as shown below netdestination Amigopod host 1040 20 15 Add an entry that allows the client based HTTPS traffic to reach the hosted Captive Portal pages on the Amigopod appliance ip access list session captiveportal user alias mswitch svc https dst nat user any svc http dst nat 8080 user any svc https dst nat 8081 The equivalent the GUI configuration will look something like the screenshot below ARURA networ ks LLER EBC Master Logout admin Wizards Security gt Firewall Policies gt Edit IPv4 Session captiveportal AP Wizard Controller Wizard User Roles System Roles Policies Time Ranges Guest Access WwW Wi LAN LAN Wizard SEE License Wizard i a Network Rules Controller Source Destination Service Action Log Mirror Queue Time Range Pause ARM Scanning BlackList TOS 802 1p Priority Action VLANs user amigopod svc https permit Low Delete a v Ports user amigopod svc http permit Low Delete a v Cellular Profile user controller svc https dst nat 8081 Low Delete IP user any svc http dst nat 8080 Low Delete v user any svc https st na ow elete Security ht dst nat 8081 L Delet v Authentication user an svc http proxy1 dst nat 8088 Low Delete Y Access Control y PPTA FJ Wireless user any svc http proxy2 dst nat
9. role ld Save Changes required field This RADIUS Role is presented in the Create User screens of Amigopod s Guest Manager or can be hard coded as a hidden field in Self Registration pages to ensure each user s session gets managed appropriately on the Aruba Controller SS E ArubaOS Amigopod Integration Cheet Sheet 12 Test Login and verify successful RADIUS transaction Now that everything is setup on both the Amigopod and the Aruba Controller attempt to connect a test wireless wired client to the network and their session should be successfully redirected to the Amigopod Web Login page Use the Amigopod Guest Manager to create a test account and then attempt to login via the redirected Web Login page If you have been able to successfully authenticate you will see a Login OK message in the RADIUS Services gt Server Control page where a tail of the RADIUS log is always displayed If you are experiencing any issues with the authentication process the RADIUS debugger can also be enabled from this page for more detailed analysis People Move Networks Must Follow networks Home RADIUS Server Control Guest Manager gt Control the local RADIUS server using these command links Help Hotspot Manager gt The RADIUS server is currently running Reporting Manager gt Restart RADIUS Server Administrator gt Restart the local RADIUS server RADIUS Services gt Stop the local RADIUS server
10. 8088 Low Delete v AP Configuration user any svc http proxy3 dst nat 8088 Low Delete a Y AP Installation Add Management General Apply Administration Commands View Commands Certificates SNMP aa mm alll Saar Z 5 ArubaOS Amigopod Integration Cheet Sheet 8 Configure Guest VAP with new AAA Profile This cheat sheet assumes you have already got a Guest SSID up and running and the associated VAP deployed to an appropriate AP Group To activate the new Amigopod specific Guest configuration edit your VAP and ensure the AAA Profile for the VAP is set to the new AAA Profile configured in the previous step ary i APUDA Configuration networks Monitoring Configuration Diagnostics Maintenance Events Reports Network 3 Casale Advanced Services gt All Profile Management VLANs oa roles profile Det pee ed M t SSID Profe gt Reset 2 anagemen a m NEW SDR Spes new S amigopod Access Control E SSID Profile Basic Advanced Wireless AP Configuration Virtual AP profile abe AP Installation EH amigopod vap Network Name SSID lamigopod Management SSID Profile NEW General E 802 11 Security Aia AAA Profile defau C E T Aa SC A Lee ee er ene ji None 802 1x WwEP WPA WPA PSK WPA2 WPA2 PSK Certificates EF default Network Authentication Mixed SNMP g Logging E AAA Profile Encryption Open WEP w i MAC Authentication Profile
11. AS Server Control FESTEN Shared Secret Server The shared secret used by this network access server Configuration ALLEE EE Confirm Shared Secret i Authentication Confirm the shared secret for this network access server Database List Dictionary Description NAS List User Roles Enter notes or descriptive text here Web Logins v Create a RADIUS Web Login page for this network access server SMS Services da Create NAS Device O Reset Form OQ Cancel Support Services required field You can optionally check the Web Login option at the bottom of the form to automatically create the Web Login form based on the Aruba Networks presets Note Once you have clicked the Create NAS Device you will be prompted to Restart the RADIUS Server This is essential as the RADIUS Server within Amigopod will reject any request from the Aruba Controller as unknown until the restart has been performed ArubaOS Amigopod Integration Cheet Sheet 10 Configure Web Login for Captive Portal Authentication Assuming you selected the Web Login checkbox on the previous step there will already be a newly created Web Login page under the RADIUS Services gt Web Logins The screenshot below shows you the automatically created Web Login but you can equally create a new one manually at a later stage APA People Move Networks Must Follow networks RADIUS Web Login Aruba Networks Use this form to make changes to the RADIUS Web L
12. e Maintenance Conor Advanced Services gt All Profile Management VLANs HE RR Pres IP E AP a Security FH RF Management T _SaveAs Reset Authentication Wireless LAN Access Control SSID Profile MAC Authentication Default Role Wireless AP Configuration E Virtual AP profile User derivation rules None w AP Installation E AAA Profile SIP authentication role NONE Management PF eee Administration MAC Authentication Profile Certificates MAC Authentication Server Group default SNMP 802 1X Authentication Profile 802 1X Authentication Server Group Clock Advanced Services RADIUS Accounting Server Group default IP Mobility Wired Access default dotix Wireless E default dotix psk E default mac auth FH default open S iii Gj Tal ill Apply Commands View Commands Also ensure the RADIUS Accounting Server Group of the AAA profile is pointing to the Server Group created in Step 2 above Eg mm Ll aa ArubaOS Amigopod Integration Cheet Sheet 6 Enable Captive Portal on Initial Role of Captive Portal Profile This step is easy to miss and the Captive Portal will not be triggered networks MOBILITY CONTROLLER EBC Master Wizards Security gt User Roles gt Edit Role GoogleGuest guest logon AP Wiza Controller Wizard User Roles System Roles Policies Time Ranges Guest Access WLAN LAN Wizard Back License Wizard Network Contr
13. ges Oy Save and Reload required field ArubaOS Amigopod Integration Cheet Sheet 11 Configure RADIUS User Role The RADIUS User Role is a collection of 1 or many RADIUS Standard or Vendor Specific Attributes These attributes can be used to signal role based access control context back to the Aruba Controller as shown in the example screenshot 2 ARTA networks Home gt Guest Manager gt Hotspot Manager gt Reporting Manager gt Administrator gt RADIUS Services gt Start Here Server Control Server Configuration Authentication Database List Dictionary NAS List User Roles Web Logins SMS Services Support Services Logout People Move Networks Must Follow RADIUS User Role Definition Use this form to make changes to the RADIUS User Role Guest ww Help Role ID 2 Guest Role Name Enter a name for this role Default role for guest accounts Description Enter comments or descriptive text about the role RADIUS Attributes Quick Help Aruba re Vendor Select a vendor Aruba User Role B Select a vendor specific attribute Attribute guest Attributes Enter a value for this attribute Always e Select when this attribute should be returned in a RADIUS Access Accept packet 3 Add Attribute Attribut Valu Condition yy Reply Message Always Modify the list of RADIUS attributes that are attached to this
14. hould not be selected if an external authentication server is in use T CJ Require a Terms and Conditions confirmation erms If checked the user will be forced to accept a Terms and Conditions checkbox Default Destination Options for controlling the destination clients will redirect to after login Default URL Enter the default URL to redirect clients Please ensure you prepend http for any external domain C Force default destination for all clients Override Destination If selected the client s default destination will be overridden regardless of its value The Page Name field is what defines the URL that will be hosted on the Amigopod appliance For example in step 3 of this document we configured the Login Page of the Captive Portal Profile to be the following URL https lt Amigopod IP Address or FQDN gt Aruba_login php As you can see the screenshot has got the Aruba login name defined there is no need to include the php extension as this will be automatically appended 7 eee E o A ArubaOS Amigopod Integration Cheet Sheet The IP Address should be set to Aruba Controller IP Address That is this address needs to be available from the wireless wired client via the captiveportal policy on the controller As you can see there are several Login Form options that allow you to override the default Login Form and Labels used to reference User and Password fields These typically do not need to be changed
15. ogin Aruba 6000 Login Help Guest Manager Aruba 6000 Login Hotspot Manager gt Name Enter a name for this web login page Reporing Manager Page Name Enter a page name for this web login Administrator The web login will be accessible from page name php RADIUS Services gt Auto generated web login for NAS Aruba 6000 Start Here Description Server Control Comments or descriptive text about the web login A i Aruba Networks B Server Vendor Settings Configuration Select a predefined group of settings suitable for standard network configurations 10 0 20 58 Authentication Address Enter the IP address or hostname of the vendor s product here Database List Use vendor default SJ Secure Login j Select a security option to apply to the web login process Dictionary Login Form NAS List Options for specifying the behaviour and content of the login form C Provide a custom login form User Roles Custom Form 9 If selected you must supply your own HTML login form in the Header or Footer HTML areas Web Logins ze i og Override the default labels and error messages Custom Labels SMS Services gt If selected you will be able to alter labels and error messages for the current login form C Perform a local authentication check Support Services Pre Auth Check If checked the username and password will be checked locally before proceeding to the NAS authentication Logout gt This option s
16. oller Firewall Policies VLANs Ports Name Rule Count APG tom Cellular Profile logon control 6 _Edit Delete a v IP captiveportal 8 Edit Delete as Ge Security Add Authentication Wireless AP Configuration Re authentication Interval AP Installation Disabled Change 0 disables re authentication A positive value enables authentication 0 4096 Management Senere Role VLAN ID Administration Not Assigned Not Assigned Kj Change Certificates SNMP Gaadi Bandwidth Contract R Upstream Not Enforced Cl _ Change Per User Giest Provisioning Downstream Not Enforced C P _ Change O Per User Captive Portal SMTP VPN Dialer Bandwidth Calculator Not Assigned Not Assigned _ Change Advanced Services Redundancy L2TP Pool IP Mobility default I2tp pool Not Assigned Change Stateful Firewall External Services PPTP Pool Client Integrity default pptp pool Not Assigned Change VPN Services Wired Access fred Captive Portal Profile Wireless GoogleGuest cp prof Not Assigned Change All Profiles Select the configured Captive Portal profile from the dropdown box and click the Change button to activate the redirect to Amigopod bi ae T ArubaOS Amigopod Integration Cheet Sheet 7 Ensure the Amigopod IP Address allowed in captiveportal policy An entry needs to be placed in the firewall policy used to control pre authentication traffic for the guest users Typically this
17. om and Blank Skins available for those customer s that wish to perform their own HTML CSS style customization The Title field allows you to customize the Page Title displayed in the Browser LS o ArubaOS Amigopod Integration Cheet Sheet Default Destination Options for controlling the destination clients will redirect to after login Default URL Enter the default URL to redirect clients Please ensure you prepend http for any external domain i C Force default destination for all clients Override Destination If selected the client s default destination will be overridden regardless of its value Login Page Options for controlling the look and feel of the login page Aruba Networks Skin Skin Choose the skin to use when this web login page is displayed Login Title The title to display on the web login page lt p gt Header HTML Insert content tema Insert self registration link FS HTML template code displayed before the login form lt p gt Contact a staff member if you are experiencing difficulty logging in lt p gt Footer HTML Insert content tema Insert self registration link ED HTML template code displayed after the login form lt p gt Logging in please wait lt p gt The Header Footer Login HTML allow you add and modify the displayed text and or content displayed on the Web Login page As you can see there a
18. pod and ArubaOS reset on both ends to be sure e Run RADIUS debugger on Amigopod for deeper analysis of the transaction er ArubaOS Amigopod Integration Cheet Sheet Aruba Networks 1344 Crossman Ave Sunnyvale CA 94089 1113 Phone 1 408 227 4500 Fax 1 408 227 4550 Get Directions General Inquiries info arubanetworks com 2010 Aruba Networks Inc AirWave Aruba Networks Aruba Mobility Management System Bluescanner For Wireless That Works Mobile Edge Architecture People Move Networks Must Follow RFprotect The All Wireless Workplace Is Now Open For Business Green Island and The Mobile Edge Company are trademarks of Aruba Networks Inc All rights reserved Aruba Networks reserves the right to change modify transfer or otherwise revise this publication and the product specifications without notice While Aruba uses commercially reasonable efforts to ensure the accuracy of the specifications contained in this document Aruba will assume no responsibility for any errors or omissions Note All scaling metrics outlined in this document are maximum supported values The scale may vary depending upon the deployment scenario and features enabled
19. put none eee E o M ArubaOS Amigopod Integration Cheet Sheet 13 Check RADIUS Accounting is working as expected If the RADIUS Accounting traffic is not being received by Amigopod you will not find a corresponding entry in the Guest Manager gt Active Sessions screen shown below Given the Interim Accounting support in ArubaOS 6 1 this screen will display live traffic Statistics based on these updates Assuming you have configured RFC 3576 on your Aruba Controller as well you can click on any given Active Session and select the Disconnect button to terminate their session on the Aruba Controller This will return the user to the login or initial role that corresponds to the configured AAA Profile Lie ADIRA People Move Networks Must Follow networks Home i i gt Active Sessions Guest Manager gt Use this list view to view and manage the active sessions on the server Help Start Here Quick Help f Manage Multiple v Filter Eg More Options Create Account 7 Filter Create Multiple Search all fields that have been configured for quick search List Accounts Showing Active sessions only Edit Accounts Active Sessions aruba guest 10 69 18 146 apollo 2010 12 15 19 22 0 0 MB Import Accounts Cc Refresh Showing 1 1 of 1 20 rows per page Export Accounts GuestManager services Customization m Back to main o OT Ve ArubaOS Amigopod Integration Cheet Sheet 14 Troubleshooting
20. re options to Insert Content and Self Registration page respectively found in Administrator gt Content Manager amp Guest Manager gt Customization gt Guest Self Registration You will notice the code at the top of the Header HTML that parses the redirect URL from the Aruba Controller if there has been an authentication error the controller returns an error message in the errmsg variable eee BEER eee ArubaOS Amigopod Integration Cheet Sheet There is an option to set a Login Delay option which will pause the login process at the point where the contents of the above Login Message HTML will be displayed This is a useful point to grab the contents of a View Source in the client s browser if you need to troubleshoot any Captive Portal issues Finally each Web Login page can be configured with Access Lists to allow or deny specific IP Source Address ranges There is an option to select the web server behavior when responding to an invalid request Login Delay The time in seconds to delay while displaying the login message Network Login Access Controls access to the login page Allowed Access Enter the IP addresses and networks from which logins are permitted Denied Access Enter the IP addresses and networks that are denied login access Send HTTP 404 Not Found status req Select the response of the system to a request that is not permitted Deny Behavior ld Save Chan
21. stomer s security policy make sure to change the Default Role of the Captive Portal profile to a Role that includes appropriate firewall policies E D ll ee rr aa a _ ArubaOS Amigopod Integration Cheet Sheet 4 Configure Authentication for Captive Portal Profile Now the new Captive Portal Profile has been created make sure the Server Group for the Amigopod RADIUS definition is selected as the authentication source P N ARURA SD f networks Configuration ARUEN 1 E a N Monitoring Diagnostics Maintenance Network a m ener Security gt Authentication gt L3 Authentication VLANS Servers AAA Profiles L2 Authentication L3 Authentication User Rules Advanced Ports IP 4 E Captive Portal Authentication Profile Server Group gt amigopod srv Save As Reset E amgepeder Access Control amigopod Servers Wireless mv Name trimFQDN mth ss Server Type Atoms AP Configuration amigopod No Radius Edit Delete a Y Management a FH VPN Authentication Profile Server Rules ee eee eee Certificates SNMP Logging Clock Advanced Services Redundancy IP Mobility Wired Access Wireless All Profiles Kal a Apply Commands View Commands Aruba Networks E mail Support y a rr aa a _ ArubaOS Amigopod Integration Cheet Sheet 5 Create AAA Profile The AAA Profile should be configured to have the Initial Role reference the newly created Captive Portal Profil
22. ted RADIUS Server to a Server Group so it is ready to be referenced in future AAA Profiles A MOBILITY CONTROLLER Aruba620 network Wizards Security gt Authentication gt Servers AP Wizard Controller Wizard Servers AAA Profiles L2 Authentication L3 Authentication User Rules Advanced WLAN LAN Wizard License Wizard E Server Group Server Group gt Guest Auth Srv Show Reference SaveAs Reset Network default Controller 5 eee Fail Through O VLANs Ports internal Servers Uplink Name Server Type trim FQDN Match Rule Actions IP RADIUS Server Guest Auth Radius No Edit Delete x v Security Guest Auth New a Server Rules Access Control E LDAP Server nia O eae eres AP Configuration Internal DB AP Installation Tacacs Accounting Server Management je HF TACACS Server Administration Certificates Windows Server SNMP Logging Clock ooon AOA KSI ArubaOS Amigopod Integration Cheet Sheet 3 Create Captive Portal Profile One of the key features of Amigopod is the ability to host the branded Web Login or Captive Portal pages on the Amigopod appliance The Captive Portal profile allows us to configure both the Login and optionally Welcome Pages to be hosted by Amigopod ARUBA contguaton men me MM OM SM
Download Pdf Manuals
Related Search