Dell PowerConnect W-Airwave W-Airwave 7.2 Configuration Guide - Page 66

Profiles > AAA > WISPr Auth, Stateful NTLM Auth, Profiles > AAA > Stateful NTLM Auth, pencil

Page 66 highlights

The Stateful NT LAN Manager (NTLM) Authentication profile requires that you specify the following components:  a server group that includes the servers performing NTLM authentication  a default role to be assigned to authenticated users. The Wireless Internet Service Provider roaming (WISPr) protocol allows users to roam between service providers. A RADIUS server is used to authenticate subscriber credentials. For details on defining a Windows server used for NTLM authentication, refer to "Security > Server Groups > Windows" on page 142. Perform these steps to configure a Stateful NTLM Auth profile. 1. Select Profiles > AAA > Stateful NTLM Auth. The details page summarizes the current profiles of this type. 2. Select the Add button to create a new Stateful NTLM Auth profile, or click the pencil icon next to an existing profile to edit. The Details page appears. Complete the settings as described in Table 17: Table 17 Profiles > AAA > Stateful NTLM Auth Profile Settings Field Default Description General Settings Folder Name Top Blank Set the folder with which the profile is associated. The drop-down menu displays all folders available for association with the profile. Enter the name of the profile. Other Settings Timeout 10 Set the aging out or timeout period, which is the amount of time for which the user sends no traffic. The user's role remains authenticated unless this period of time is exceeded. Server Group default Select a server from the drop-down menu. You can edit servers with the pencil icon or add additional servers with the Add icon. Default Role guest Select a user role to associate with the user from the drop-down menu. You can edit roles with the Pencil icon or add additional roles with the Add icon. Mode No Indicates whether this profile is enabled or disabled. A minimum of AOS 6.0.0.0 is required. 3. Select Add or Save. The added or edited profile appears on the Stateful NTLM Auth page, and on the details page. Profiles > AAA > WISPr Auth The Wireless Internet Service Provider roaming (WISPr) protocol allows users to roam between service providers. A RADIUS server is used to authenticate subscriber credentials. AOS supports stateful 802.1x authentication, stateful NTLM authentication and authentication for Wireless Internet Service Provider roaming (WISPr). Stateful authentication differs from 802.1x authentication in that the controller does not manage the authentication process directly, but monitors the authentication messages between a user and an external authentication server, and then assigns a role to that user based upon the information in those authentication messages. WISPr authentication allows clients to roam between hotspots using different ISPs. Refer to the Dell PowerConnect ArubaOS User Guide for additional information about stateful NTLM and WISPr authentication. Perform these steps to configure a WISPr Auth profile. 66 | Dell PowerConnect W Configuration Reference Dell PowerConnect W AirWave 7.2 | Configuration Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160

66
|
Dell PowerConnect W Configuration Reference
Dell PowerConnect W AirWave 7.2
| Configuration Guide
The Stateful NT LAN Manager (NTLM) Authentication profile requires that you specify the following
components:
a server group that includes the servers performing NTLM authentication
a default role to be assigned to authenticated users.
The Wireless Internet Service Provider roaming (WISPr) protocol allows users to roam between service providers.
A RADIUS server is used to authenticate subscriber credentials.
For details on defining a Windows server used for NTLM authentication, refer to
“Security > Server Groups >
Windows” on page 142
.
Perform these steps to configure a
Stateful NTLM Auth
profile.
1.
Select
Profiles > AAA > Stateful NTLM Auth
. The details page summarizes the current profiles of this type.
2.
Select the
Add
button to create a new
Stateful NTLM Auth
profile, or click the
pencil
icon next to an existing
profile to edit. The
Details
page appears. Complete the settings as described in
Table 17
:
3.
Select
Add
or
Save
.
The added or edited profile appears on the
Stateful NTLM Auth
page, and on the details
page.
Profiles > AAA > WISPr Auth
The Wireless Internet Service Provider roaming (WISPr) protocol allows users to roam between service providers.
A RADIUS server is used to authenticate subscriber credentials.
AOS supports stateful 802.1x authentication, stateful NTLM authentication and authentication for Wireless
Internet Service Provider roaming (WISPr). Stateful authentication differs from 802.1x authentication in that
the controller does not manage the authentication process directly, but monitors the authentication messages
between a user and an external authentication server, and then assigns a role to that user based upon the
information in those authentication messages. WISPr authentication allows clients to roam between hotspots
using different ISPs.
Refer to the
Dell PowerConnect
ArubaOS User Guide
for additional information about stateful NTLM and WISPr
authentication.
Perform these steps to configure a
WISPr Auth
profile.
Table 17
Profiles > AAA > Stateful NTLM Auth Profile Settings
Field
Default
Description
General Settings
Folder
Top
Set the folder with which the profile is associated. The drop-down menu displays all
folders available for association with the profile.
Name
Blank
Enter the name of the profile.
Other Settings
Timeout
10
Set the aging out or timeout period, which is the amount of time for which the user sends
no traffic. The user’s role remains authenticated unless this period of time is exceeded.
Server Group
default
Select a server from the drop-down menu. You can edit servers with the pencil icon or
add additional servers with the
Add
icon.
Default Role
guest
Select a user role to associate with the user from the drop-down menu. You can edit roles
with the
Pencil
icon or add additional roles with the
Add
icon.
Mode
No
Indicates whether this profile is enabled or disabled.
A minimum of AOS 6.0.0.0 is required.