Dell W-Series 228 Instant 6.5.1.0-4.3.1.0 User Guide - Page 165
Enabling 802.1X Supplicant Support, Configuring a W-IAP for 802.1X Supplicant Support
![]() |
View all Dell W-Series 228 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 165 highlights
5. Specify the type of authentication server to use and configure other required parameters. For more information on configuration parameters, see Configuring Security Settings for a Wired Profile on page 106. 6. Click Next to define access rules, and then click Finish to apply the changes. 7. Assign the profile to an Ethernet port. For more information, see Assigning a Profile to Ethernet Ports on page 109. In the CLI To enable 802.1X authentication for a wired profile: (Instant AP)(config)# wired-port-profile (Instant AP)(wired ap profile )# type {|} (Instant AP)(wired ap profile )# dot1x (Instant AP)(wired ap profile )# auth-server (Instant AP)(wired ap profile )# auth-server (Instant AP)(wired ap profile )# server-load-balancing (Instant AP)(wired ap profile )# radius-reauth-interval (Instant AP)(wired ap profile )# end (Instant AP)# commit apply Enabling 802.1X Supplicant Support The 802.1X authentication protocol prevents the unauthorized clients from gaining access to the network through publicly accessible ports. If the ports to which the W-IAPs are connected, are configured to use the 802.1X authentication method, ensure that you configure the W-IAPs to function as an 802.1X client or supplicant. If your network requires all wired devices to authenticate using PEAP or TLS protocol, you need to configure the W-IAP uplink ports for 802.1X authentication, so that the switch grants access to the W-IAP only after completing the authentication as a valid client. To enable the 802.1X supplicant support on a W-IAP, ensure that the 802.1X authentication parameters are configured on all W-IAPs in the cluster and are stored securely in the W-IAP flash. The 802.1X supplicant support feature is not supported with mesh and Wi-Fi uplink. Configuring a W-IAP for 802.1X Supplicant Support To enable 802.1X supplicant support, configure 802.1X authentication parameters on every W-IAP using the Instant UI or the CLI. In the UI 1. To use PEAP protocol-based 802.1X authentication method, complete the following steps: a. In the Access Points tab, click the W-IAP on which you want to set the variables for 802.1X authentication, and then click the edit link. b. In the Edit Access Point window, click the Uplink tab. c. Under PEAP user, enter the username, password, and retype the password for confirmation. The W-IAP username and password are stored in W-IAP flash. When the W-IAP boots, the /tmp/ap1xuser and /tmp/ap1xpassword files are created based on these two variables. The default inner authentication protocol for PEAP is MS-CHAPV2. 2. To upload server certificates for validating the authentication server credentials, complete the following steps: Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Authentication and User Management | 165
![](/manual_guide/products/dell-wseries-228-instant-65104310-user-guide-85381e0/165.png)