Dell PowerConnect W-Airwave W-Airwave 7.2 Configuration Guide - Page 55

Profiles > AAA > 802.1x Auth, Save., AAA Profiles, 1X Auth, pencil, Details - technologies

Get Dell PowerConnect W-Airwave PDF manuals and user guides View all Dell PowerConnect W-Airwave manuals
Add to My Manuals
Save this manual to your list of manuals

Page 55 highlights

Table 8 Profiles > AAA > New AAA Profile Settings Field Default Description RFC 3576 Servers RFC 3576 Servers Select the RFC 3576 RADIUS server to support the AAA profile being configured, if required. This section is blank if there are no such servers. 3. Select Add or Save. The added or edited AAA profile appears on the AAA Profiles page. Profiles > AAA > 802.1x Auth 802.1x authentication consists of three components:  The supplicant, or client, is the device attempting to gain access to the network. You can configure the Dell PowerConnect W user-centric network to support 802.1x authentication for wired users as well as wireless users.  The authenticator is the gatekeeper to the network and permits or denies access to the supplicants. The Dell PowerConnect W controller acts as the authenticator, relaying information between the authentication server and supplicant. The EAP type must be consistent between the authentication server and supplicant and is transparent to the controller.  The authentication server provides a database of information required for authentication and informs the authenticator to deny or permit access to the supplicant. The 802.1x authentication server is typically an EAP-compliant Remote Access Dial-In User Service (RADIUS) server which can authenticate either users (through passwords or certificates) or the client computer. An example of an 802.1x authentication server is the Internet Authentication Service (IAS) in Windows (see http://technet2.microsoft.com/windowsserver/en/technologies/ias.mspx). In Dell PowerConnect W user-centric networks, you can terminate the 802.1x authentication on the controller. The controller passes user authentication to its internal database or to a "backend" non-802.1x server. This feature, also called "AAA FastConnect," is useful for deployments where an 802.1x EAP-compliant RADIUS server is not available or required for authentication. Perform these steps to configure an 802.1X Auth profile. 1. Select Profiles > AAA > 802.1x Auth. The details page summarizes the current profiles of this type. 2. Select the Add button to create a new 802.1x Auth profile, or click the pencil icon next to an existing profile to edit. The Details page appears. Complete the settings as described in Table 9: Table 9 Profiles > AAA > 802.1x Auth Profile Settings Field Default Description General Settings Folder Top Name Other Settings Max Authentication Failures Blank 0 Set the folder with which the profile is associated. The drop-down menu displays all folders available for association with the profile. Enter the name of the profile. Number of times a user can try to login with wrong credentials after which the user will be blacklisted as a security threat. Set to 0 to disable blacklisting, otherwise enter a non-zero integer to blacklist the user after the specified number of failures. This setting requires a wireless intrusion protection license. Dell PowerConnect W AirWave 7.2 | Configuration Guide Dell PowerConnect W Configuration Reference | 55

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
Dell PowerConnect W AirWave 7.2
| Configuration Guide
Dell PowerConnect W Configuration Reference
|
55
3.
Select
Add
or
Save.
The added or edited
AAA
profile appears on the
AAA Profiles
page.
Profiles > AAA > 802.1x Auth
802.1x authentication consists of three components:
The
supplicant
, or
client
, is the device attempting to gain access to the network. You can configure the Dell
PowerConnect W user-centric network to support 802.1x authentication for wired users as well as wireless
users.
The
authenticator
is the gatekeeper to the network and permits or denies access to the supplicants. The Dell
PowerConnect W controller acts as the authenticator, relaying information between the authentication server
and supplicant. The EAP type must be consistent between the authentication server and supplicant and is
transparent to the controller.
The
authentication server
provides a database of information required for authentication and informs the
authenticator to deny or permit access to the supplicant.
The 802.1x authentication server is typically an EAP-compliant Remote Access Dial-In User Service (RADIUS)
server which can authenticate either users (through passwords or certificates) or the client computer.
An example of an 802.1x authentication server is the Internet Authentication Service (IAS) in Windows (see
).
In Dell PowerConnect W user-centric networks, you can terminate the 802.1x authentication on the controller.
The controller passes user authentication to its internal database or to a “backend” non-802.1x server. This
feature, also called “AAA FastConnect,” is useful for deployments where an 802.1x EAP-compliant RADIUS
server is not available or required for authentication.
Perform these steps to configure an
802.1X Auth
profile.
1.
Select
Profiles > AAA > 802.1x Auth
. The details page summarizes the current profiles of this type.
2.
Select the
Add
button to create a new
802.1x Auth
profile, or click the
pencil
icon next to an existing profile
to edit. The
Details
page appears. Complete the settings as described in
Table 9
:
RFC 3576 Servers
RFC 3576 Servers
Select the RFC 3576 RADIUS server to support the AAA profile being configured, if
required. This section is blank if there are no such servers.
Table 9
Profiles > AAA > 802.1x Auth Profile Settings
Field
Default
Description
General Settings
Folder
Top
Set the folder with which the profile is associated. The drop-down menu displays all
folders available for association with the profile.
Name
Blank
Enter the name of the profile.
Other Settings
Max Authentication
Failures
0
Number of times a user can try to login with wrong credentials after which the user will
be blacklisted as a security threat.
Set to 0 to disable blacklisting, otherwise enter a non-zero integer to blacklist the user
after the specified number of failures.
This setting requires a wireless intrusion protection license.
Table 8
Profiles > AAA > New AAA Profile Settings
Field
Default
Description