318| Virtual APs DellPowerConnect W- Series ArubaOS 6.2 | User Guide
3. Click t he User Roles tab. Click Add to add a new user role. Enter the nameo f the role.Under Firewall Policies,
click Add.I n theC hoose fromConfigured Policies drop-down list, select the policy you previously created. Click
Done.
4. Click A pply.
In the CLI
(host)(config) #ip access-list session <policy>
<source> <dest> <service> <action>
(host)(config) #user-role employee
access-list session <policy>
Configuring A uthentication Servers
This exampleuses RAD IUS serversfor the client authentication. You need to specify the hostname and IP address
for each RADIUS server and the shared secret used to authenticate communication between the server and the
controller.After configuring authentication servers, assign them to the cor pnet servergroup, an ordered list of the
serverst o be used for 802.1x authentication.
For more information about configuring authentication servers, see "ConfiguringServers" on page 169.
In the WebUI
1. N avigate to the Configuration > Security > Authentication > Servers page.
2. Select Radius Server to display the Radi us ServerList.
3. E ntert hename of the server, and click Add. The servername appears in the list of servers.
4. Select the server name. Enter the IP address and sharedsecret for the server. Select the Mode checkbox to
activate the authentication server.
5. Click A pplyto apply the configuration.
6. Select Server Group on the Servers page.
7. E ntert hename of the group, and click Add. The servergroup name appears in the list of server groups.
8. Select t he servergroup name. Click New to add a server to t he group.Under Server Name, select the server you
just configuredand click A dd.
9. Click A pplyto apply the configuration.
In the CLI
(host)(config) #aaa authentication-server radius Radius1
host <ipaddr>
key <key>
enable
(host)(config) #aaa server-group corpnet
auth-server Radius1
Configuring A uthentication
In this example, you create the 802.1x authentication profile corpnet. The AAA profile configuresthe
authentication for a WLAN. The AAA profile defines the type of authentication (8 02.1x in this example), the
authentication server group,and the default user role for authenticated users.
In the WebUI
1. N avigate to the Configuration > Security > Authentication > L2 Authentication page. Select 802.1x
Authentication Profile.