Dell PowerConnect W Clearpass 100 Software Guía de usuario descargar pdf (Pagina 92)

9292 | Wireless Network Profiles

Dell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide

n Create access rules for a specific user role. For more information, see Configuring Access Rules on page

158. You can also configure an access rule to enforce Captive portal authentication for an SSIDthat is

configured to use 802.1X authentication method. For more information, see Configuring Captive Portal

Roles for an SSID with 802.1x authentication on page 142.

n Create a role assignment rule. For more information, see Configuring Role Assignment Rules on page 166.

2. Click Finish.

In the CLI

To configure access control rules for a WLAN SSID:

(Instant Access Point)(config)# wlan access-rule <access-rule-name>

(Instant Access Point)(Access Rule <Name>)# rule <dest> <mask> <match> <protocol> <start-port>

<end-port> {permit |deny | src-nat | dst-nat {<IP-address> <port> | <port>}}

[<option1....option9>]

(Instant Access Point)(Access Rule <Name>)# end

(Instant Access Point)# commit apply

To configure access control based on the SSID:

(Instant Access Point)(config)# wlan ssid-profile <SSID-Name>

(Instant Access Point)(SSID Profile<name>)# set-role-by-ssid

(Instant Access Point)(SSID Profile<name>)# end

(Instant Access Point)(SSID Profile<name>)# commit apply

To configure role assignment rules:

(Instant Access Point)(config)# wlan ssid-profile <SSID-Name>

(Instant Access Point)(SSID Profile<name>)# set-role <attribute>{{equals|not-equals|starts-

with|ends-with|contains}<operator><role>|value-of}

(Instant Access Point)(SSID Profile<name>)# end

(Instant Access Point)(SSID Profile<name>)# commit apply

To configure a pre-authentication role:

(Instant Access Point)(config)# wlan ssid-profile <SSID-Name>

(Instant Access Point)(SSID Profile<name>)# set-role-pre-auth <pre-authentication-role>

(Instant Access Point)(SSID Profile<name>)# end

(Instant Access Point)(SSID Profile<name>)# commit apply

To configure machine and user authentication roles

(Instant Access Point)(config)# wlan ssid-profile <SSID-Name>

(Instant Access Point)(SSID Profile<name>)# set-role-machine-auth <machine-authentication-

only> <user-authentication-only>

(Instant Access Point)(SSID Profile<name>)# end

(Instant Access Point)(SSID Profile<name>)# commit apply

To configure unrestricted access:

(Instant Access Point)(config)# wlan ssid-profile <SSID-Name>

(Instant Access Point)(SSID Profile<name>)# set-role-unrestricted

(Instant Access Point)(SSID Profile<name>)# end

(Instant Access Point)(SSID Profile<name>)# commit apply

Editing Status of a WLAN SSID Profile

You can enable or disable an SSID profile in the Instant UI or CLI.

In the Instant UI

To modify the status of a WLAN SSID profile:

1. In the Networks tab, select the network that you want to edit. The edit link appears.

2. Click the edit link. The Edit network window appears.

1 2 ... 87 88 89 90 91 92 93 94 95 96 97 ... 295 296

Comentarios a estos manuales

Sin comentarios