Dell PowerConnect W Clearpass 100 Software Guía de usuario Pagina 118

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 296
  • Tabla de contenidos
  • SOLUCIÓN DE PROBLEMAS
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 117
118118 | Authentication
Dell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide
authentication is attempted. If 802.1X authentication is successful, the client is assigned an 802.1X
authentication role. If 802.1X authentication fails, the client is assigned a deny-all role or mac-auth-only role.
n MAC authentication only role - Allows you to create a mac-auth-only role to allow role-based access rules
when MAC authentication is enabled for 802.1X authentication. The mac-auth-only role is assigned to a
client when the MAC authentication is successful and 802.1X authentication fails. If 802.1X authentication is
successful, the mac-auth-only role is overwritten by the final role. The mac-auth-only role is primarily used
for wired clients.
n L2 authentication fall-through - Allows you to enable the l2-authentication-fallthrough mode. When this
option is enabled, the 802.1X authentication is allowed even if the MAC authentication fails. If this option is
disabled, 802.1X authentication is not allowed. The l2-authentication-fallthrough mode is disabled by
default.
For more information on configuring an OAW-IAP to use MAC + 802.1X Authentication, see Configuring MAC
Authentication with 802.1X Authentication on page 133.
l Captive Portal Captive portal authentication is used for authenticating guest users. For more information on
Captive Portal authentication, see Configuring Captive Portal Authentication on page 135.
l MAC authentication with Captive Portal authenticationThis authentication method has the following
features:
n If the captive portal splash page type is Internal-Authenticated or External-RADIUS Server, MAC
authentication reuses the server configurations.
n If the captive portal splash page type is Internal-Acknowledged or External-Authentication Text and MAC
authentication is enabled, a server configuration page is displayed.
n If the captive portal splash page type is none, MAC authentication is disabled.
n You can configure the mac-auth-only role when MAC authentication is enabled with captive portal
authentication.
For more information configuring an OAW-IAP to use MAC and Captive Portal authentication, see Configuring
MAC Authentication with Captive Portal Authentication on page 144.
l 802.1X authentication with Captive Portal authentication This authentication mechanism allows you to
configure different Captive portal settings for clients on the same SSID. For example, you can configure an
802.1x SSID and create a role with for captive portal access, so that some of the clients using the SSID derive
the Captive portal role. You can configure rules to indicate access to external or internal Captive portal, or none.
For more information on configuring Captive portal roles for an SSID with 802.1x authentication, see Configuring
Captive Portal Roles for an SSID with 802.1x authentication on page 142.
l WISPr authenticationWireless Internet Service Provider roaming (WISPr) authentication allows a smart client
to authenticate on the network when they roam between wireless Internet service providers, even if the wireless
hotspot uses an Internet Service Provider (ISP) with whom the client may not have an account.
If a hotspot is configured to use WISPr authentication in a specific ISP and a client attempts to access the
Internet at that hotspot, the WISPr AAA server configured for the ISP authenticates the client directly and allows
the client to access the network. If the client only has an account with a
partner
ISP, the WISPr AAA server
forwards the client’s credentials to the partner ISP’s WISPr AAA server for authentication. When the client is
authenticated on the partner ISP, it is also authenticated on your hotspot’s own ISP as per their service
agreements. The OAW-IAP assigns the default WISPr user role to the client when your ISP sends an
authentication message to the OAW-IAP. For more information on WISPr authentication, see Configuring WISPr
Authentication on page 146.
Vista de pagina 117
1 2 ... 113 114 115 116 117 118 119 120 121 122 123 ... 295 296

Comentarios a estos manuales

Sin comentarios