Alcatel-Lucent IAP93 Podręcznik Użytkownika Strona 149
- Strona / 335
- Spis treści
- ROZWIĄZYWANIE PROBLEMÓW
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
149 | Authentication AOS-W Instant 6.3.1.1-4.0 | User Guide
Controller for communication with external RADIUS servers. Ensure that the Virtual Controller IP Address is set as
a NAS IP when configuring RADIUS server attributes with dynamic RADIUS proxy enabled. For more information
on configuring RADIUS server attributes, see Configuring an External Server for Authentication on page 144.
In the CLI
To enable the dynamic RADIUS proxy feature:
(Instant Access Point)(config)# dynamic-radius-proxy
(Instant Access Point)(config)# end
(Instant Access Point)# commit apply
Configuring Dynamic RADIUS Proxy Parameters for Authentication Servers
You can configure DRP parameters for the authentication server by using the AOS-W Instant UI or CLI.
In the AOS-W Instant UI
1. Click the Security>Authentication Servers.
2. To create a new server, click New and configure the required RADIUSserver parameters as described in Table
27.
3. Ensure that the following dynamic RADIUS proxy parameters are configured:
l DRP IP— IP address to be used as source IP for RADIUS packets
l DRP Mask—Subnet mask of the DRP IP address.
l DRP VLAN—VLAN in which the RADIUS packets are sent.
l DRP Gateway—Gateway IP address of the DRP VLAN.
4. Click OK.
In the CLI
To configure dynamic RADIUS proxy parameters:
(Instant Access Point)(config)# wlan auth-server <profile-name>
(Instant Access Point)(Auth Server <profile-name>)# ip <IP-address>
(Instant Access Point)(Auth Server <profile-name>)# key <key>
(Instant Access Point)(Auth Server <profile-name>)# port <port>
(Instant Access Point)(Auth Server <profile-name>)# acctport <port>
(Instant Access Point)(Auth Server <profile-name>)# nas-id <NAS-ID>
(Instant Access Point)(Auth Server <profile-name>)# nas-ip <NAS-IP-address>
(Instant Access Point)(Auth Server <profile-name>)# timeout <seconds>
(Instant Access Point)(Auth Server <profile-name>)# retry-count <number>
(Instant Access Point)(Auth Server <profile-name>)# deadtime <minutes>
(Instant Access Point)(Auth Server <profile-name>)# drp-ip <IP-address> <mask> vlan <vlan>
gateway <gateway-IP-address>
(Instant Access Point)(Auth Server <profile-name>)# end
(Instant Access Point)# commit apply
Associate the AuthenticationServers with an SSID or Wired Profile
1. Access the WLAN wizard or Wired Settings window.
l To open the WLAN wizard, select an existing SSID in the Network tab, and click edit.
l To open the wired settings window, click More>Wired. In the Wired window, select a profile and click Edit.
You can also associate the authentication servers when creating a new WLAN or wired profile.
2. Click the Security tab.
3. If you are configuring authentication server for a WLAN SSID, under Security tab, slide to Enterprise security
level.
4. Ensure that an authentication type is enabled.
- User Guide 1
- AOS-W Instant 1
- 6.3.1.1-4.0 1
- Contents 3
- In the AOS-W Instant UI 71 5
- In the CLI 72 5
- Mesh OAW-IAP Configuration 79 6
- VLAN Configuration 81 6
- Wireless Network Profiles 85 7
- Wired Profiles 102 8
- In the CLI 121 9
- User Management 128 10
- Authentication 134 10
- In the AOS-W Instant UI 148 11
- In the CLI 149 11
- In the AOS-W Instant UI 149 11
- In the AOS-W Instant UI 159 12
- In the CLI 160 12
- Roles and Policies 164 13
- Example 180 14
- Example 183 14
- In the AOS-W Instant UI 185 14
- Uplink Configuration 187 15
- Spectrum Monitor 203 16
- Adaptive Radio Management 211 16
- Intrusion Detection 221 17
- Content Filtering 228 17
- DHCP Configuration 231 17
- VPN Configuration 239 18
- IAP-VPN Configuration 252 18
- In the AOS-W Instant UI 261 19
- In the CLI 262 19
- AirGroup Configuration 268 20
- Hotspot Profiles 287 21
- Extended Voice and Video 301 22
- Dynamic CPUManagement 302 22
- OAW-IAP Management 304 22
- Regulatory Domain 322 23
- ClearPass Guest Setup 327 23
- Terminology 331 23
- Intended Audience 25
- Related Documents 25
- Conventions 25
- Contacting Support 26
- AOS-W Instant Overview 27
- AOS-W Instant UI 28
- AOS-W Instant CLI 28
- New Features in 6.3.1.1-4.0 29
- Platform 31
- Description 31
- Chapter 3 32
- Setting up an OAW-IAP 32
- Assigning a Static IP 33
- OAW-IAP Cluster 33
- 9600 8 None 1 None 34
- Specifying Country Code 35
- Connecting to a CLI Session 35
- Sequence-Sensitive Commands 37
- Login Screen 38
- Main Window 39
- Networks Tab 40
- Access Points Tab 40
- Clients Tab 41
- New Version Available 41
- Security 44
- Maintenance 45
- Monitoring 51
- Table 7: 52
- RF Dashboard Icons 53
- Icon Name Description 54
- RF Trends 54
- Figure 17 Signal Graph 54
- Table 9: 56
- Table 10: 57
- Spectrum 60
- Types of Alerts 61
- Alerts list 62
- Configuration 64
- AirGroup 65
- OmniVista 3600 Setup 65
- Pause/Resume 65
- Chapter 5 67
- Initial Configuration Tasks 67
- Modifying the OAW-IAP Name 68
- Configuring External Antenna 69
- Upgrading an OAW-IAP 70
- Enabling Terminal Access 73
- Enabling Auto Join Mode 74
- Configuring a Preferred Band 74
- Configuring an NTP Server 77
- Mesh Network Overview 79
- Mesh Points 80
- Chapter 7 81
- VLAN Configuration 81
- Virtual Controller Overview 82
- Antenna Type:Internal 83
- Iap_master:1 83
- Chapter 9 85
- Wireless Network Profiles 85
- WLAN Configuration Parameters 87
- Security Level 93
- Table 18: 93
- 802.11r Roaming 97
- Opportunistic Key Caching 98
- Enabling the Extended SSID 100
- Editing a WLAN SSID Profile 101
- Deleting a WLAN SSID Profile 101
- Configuring a Wired Profile 102
- In the CLI 103
- In the AOS-W Instant UI 103
- Editing a Wired Profile 108
- Deleting a Wired Profile 109
- Understanding Captive Portal 110
- Walled Garden 111
- Parameters Description 112
- In the Instant UI 116
- RADIUS Services 121
- OAW-IAP Users 128
- Interface 128
- 5. Click OK 133
- Chapter 13 134
- Authentication 134
- External RADIUS Server 136
- Internal RADIUS Server 136
- Supported VSAs 137
- WPA and WPA2 141
- Access-Accept 142
- Parameter Description 145
- Table 27: 145
- Table 28: 146
- Enabling Dynamic RADIUS Proxy 148
- Management Interface 150
- Blacklisting Clients 158
- Blacklisting Clients Manually 159
- Uploading Certificates 160
- Figure 54 Selecting the Group 163
- Firewall Configuration 164
- Managing Inbound Traffic 167
- Access Control List Rules 169
- Field Description 170
- Table 30: 170
- Configuring User Roles 175
- Configuring Derivation Rules 178
- Understanding VLAN Assignment 180
- User Role 182
- VLANs Created for an SSID 182
- Creating a User VLAN Role 185
- Uplink Interfaces 187
- Ethernet Uplink 188
- 3G/4G Uplink 190
- List of Supported 3G Modems 191
- 4G Supported Modem 192
- Wi-Fi Uplink 194
- Enforcing Uplinks 196
- Setting an Uplink Priority 196
- Enabling Uplink Preemption 197
- Layer-3 Mobility Overview 200
- Configuring L3-Mobility 201
- Understanding Spectrum Data 203
- Non Wi-Fi Interferers 204
- Non Wi-Fi Interferer Types 205
- Channel Details 206
- Channel Metrics 207
- Spectrum Alerts 208
- ARM Overview 211
- Airtime Fairness Mode 212
- ARM Metrics 213
- Figure 71 RF Window - ARM Tab 214
- Table 38: 214
- To view ARM configuration: 217
- OS Fingerprinting 221
- Table 43: 223
- Client Detection Policies 224
- Client Protection Policies 225
- Configuring IDSUsing CLI 226
- Content Filtering 228
- Enabling Content Filtering 228
- Configuring DHCP Scopes 231
- Name Description 232
- Table 47: 232
- Understanding VPN Features 239
- Configuring an L2TPv3 Tunnel 244
- To view L2TPv3 configuration: 247
- To view L2TPV3 tunnel status: 248
- To view L2TPv3 tunnel config: 249
- Configuring Routing Profiles 250
- Overview 252
- IAP-VPN Scalability Limits 253
- OSPFConfiguration 253
- VPN Configuration 255
- Viewing Branch Status 256
- Omnivista Features 258
- Trending Reports 259
- Intrusion Detection System 259
- Configuring Omnivista 260
- Shared Key 261
- Figure 97 Omnivista —Monitor 267
- AirGroup Overview 268
- AirGroup with AOS-W Instant 269
- AirGroup Solution 270
- AirGroup Features 271
- AirGroup Components 272
- AirGroup Services 272
- Creating a RADIUS Server 275
- Assign a Server to AirGroup 275
- Chapter 26 276
- Chapter 27 281
- Client Traffic Replication 283
- Creating a CALEA Profile 283
- Verifying the configuration 285
- Chapter 28 287
- Hotspot Profiles 287
- Configuring Hotspot Profiles 288
- Venue Types 291
- Configuring a 3GPP Profile 293
- Configuring a Domain Profile 293
- Creating a Hotspot Profile 295
- Table 57: 296
- Sample Configuration 298
- Chapter 29 301
- Extended Voice and Video 301
- Dynamic CPU Management 302
- Chapter 31 303
- Configuring LED Display 304
- Restoring Configuration 305
- Rebooting the OAW-IAP 309
- Configuring SNMP 311
- Configuring a Syslog Server 314
- Logging Levels 315
- Configuring TFTP Dump Server 316
- Support Commands 317
- Country Codes List 322
- Code Country Name 323
- ClearPass Guest Setup 327
- Troubleshooting 330
- Acronyms and Abbreviations 331
- Glossary 332
- List of Terms 333
© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.030 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji