Dell W-Series 207 Instant 6.5.1.0-4.3.1.0 User Guide - Page 107

authentication fail-thru check box is displayed only when both MAC authentication and 802.1X authentication are Enabled. l Select any of the following options for Authentication server 1: n New-On selecting this option, an external RADIUS server must be configured to authenticate the users. For information on configuring an external server, see Configuring an External Server for Authentication on page 151.Authentication and User Management on page 139 n Internal server- If an internal server is selected, add the clients that are required to authenticate with the internal RADIUS server. Click the Users link to add users. For information on adding a user, see Managing W-IAP Users on page 139. l Accounting-Select any of the following options: n Disabled-Disables accounting. n Use authentication servers-When selected, the authentication servers configured for the wired profile are used for accounting purposes. n Use separate servers-Allows you to configure separate accounting servers. n Accounting interval-Allows you set an accounting interval within the range of 0-60 minutes for sending interim accounting information to the RADIUS server. n Reauth interval-Specify the interval at which all associated and authenticated clients must be reauthenticated. l Load balancing-Set this to Enabled if you are using two RADIUS authentication servers, so that the load across the two RADIUS servers is balanced. For more information on the dynamic load balancing mechanism, see Dynamic Load Balancing between Two Authentication Servers on page 151. 2. Click Next. The Access tab details are displayed. In the CLI To configure security settings for an employee network: (Instant AP)(config)# wired-port-profile (Instant AP)(wired ap profile )# mac-authentication (Instant AP)(wired ap profile )# l2-auth-failthrough (Instant AP)(wired ap profile )# auth-server (Instant AP)(wired ap profile )# server-load-balancing (Instant AP)(wired ap profile )# radius-accounting (Instant AP)(wired ap profile )# radius-accounting-mode {user-association|userauthentication} (Instant AP)(wired ap profile )# radius-interim-accounting-interval (Instant AP)(wired ap profile )# radius-reauth-interval (Instant AP)(wired ap profile )# trusted (Instant AP)(wired ap profile )# end (Instant AP)# commit apply Configuring Access Rules for a Wired Profile The Ethernet ports allow third-party devices such as Voice over Internet Protocol (VoIP) phones or printers (that support only wired connections) to connect to the wireless network. You can also configure an Access Control List (ACL) for additional security on the Ethernet downlink. If you are creating a new wired profile, complete the Wired Settings and configure the VLAN and security parameters before defining access rules. For more information, see Configuring Wired Settings on page 104, Configuring VLAN for a Wired Profile on page 105, and Configuring Security Settings for a Wired Profile on page 106. You can configure access rules by using the Instant UI or the CLI. 107 | Wired Profiles Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide