10. For PEAP, select the “inner” authentication method. The authentication method shown is MS-CHAPv2.
(Because password authentication is being used on this network, this is t heo nlyE AP authentication type that
shouldbe selected.)
You can also enablefast reconnect in this screen. If you enable fast reconnect hereand also on client devices,
additional time can be saved when multiple authentications take place (such as when clients are roaming
between APs frequently)because the server will keep the PEAP encrypted tunnel alive.
11. Click OK.
Configuring R ADIUS Attributes
In the configuration examplefor 802.1x, the controller restricts network access privileges based on the group
membershipof the computer or user. In order for this to work, the controllermust be told to w hichgroup the user
belongs.This i s accomplished using RADIUS attributes returned by the authentication server.
To configure RADIUS attributes:
1. In t he Internet Authentication Service window, select Remote A ccess Policies.
1. Open the remote access policy you want to co nfigure,and select the Advanced tab.
2. Click Add to configurean att ribute.
3. Select the Class attribute.
4. Enter t hevalue for this attribute. For example,for the Wireless -Computerspolicy, the Class att ributereturned
to the controllershould contain the value “computer”.
Figure 412: RADIUS classAttribute Configuration
5. Click OK.
6. Click OK.
Another exampleof a Class attribute configuration is shown below for the “Wireless-Student” policy. This policy
returnsthe RAD IUS attribute Class with the value “student” upon successfulcompletion.
DellPowerConnect W- Series ArubaOS 6.2 | UserGuide | 846