531| Remote AccessPoints DellPowerConnect W- Series ArubaOS 6.2 | UserGuide
user-role <role>
session-acl <policy>

Using the CLI to confi guret he AAA profile

aaa profile <name>
initial-role <role>
You can define other parametersas needed.

Defining the Backup Confi guration in the CLI

wlan ssid-profile <profile>
essid <name>
opmode <method>
wpa-passphrase <string> (if necessary)
wlan virtual-ap <name>
ssid-profile <profile>
vlan <vlan>
forward-mode bridge
aaa-profile <name>
rap-operation {always|backup}
ap system-profile <name>
lms-ip <ipaddr>
master-ip <ipaddr>
rap-dhcp-default-router <ipaddr>
rap-dhcp-dns-server <ipaddr>
rap-dhcp-lease <days>
rap-dhcp-pool-end <ipaddr>
rap-dhacp-pool-netmask <netmask>
rap-dhcp-pool-start <ipaddr>
rap-dhcp-server-id <ipaddr>
rap-dhcp-server-vlan <vlan>
ap-group <name>
virtual-ap <name>
ap-system-profile <name>
or
ap-name <name>
virtual-ap <name>
ap-system-profile <name>
Specifying th e DNS Con troller Setting
In addition to specifying IP addresses for Dell controllers, you can also specify the master DNS name for the
controllerwhen provisioning the remote AP . The namemust be resolved to an IP address when attempting to setup
the IPSec tunnel.For information on how to co nfigurea host name entry on the DNS server, refert o the vendor
documentation for yourserver. Dell recommends using a maximumof 8 IP addresses to resolve a controller name.
If the remote AP gets multiple IP addresses respondingto a host name lookup, the remote AP can use one of them
to establish a connection to the controller. For moredetailed information, see the next section "Backup Controller
List " on page 532.
Specifying the namealso lets you move or change remote AP concentrators without reprovisioning your APs. For
example,in a DNS load-balancing model, the host name resolvesto a different IP address depending on the location
of the user.This allows the remote AP t o contact the controllert o which it is geographically closest.