Security

Does Aruba support per SSID radius authentication? If so, please explain the configuration behind the following.

 

ssid a authenticates against radius server a

ssid b authenticates against radius server b

 

Lastly, what are the default aaa timeouts and can they be adjusted?

1.  yes.  When you create a wireless network with the wizard, you are asked what radius server you want to point it to.

2.  When you say default AAA timeouts, what do you mean?

 

 

What are the default timeouts for authentication? For instance, I have a high latency link that I want to authenticate over..

Bill Dugas

The 802.1x timeout is typically 2 seconds.  Many 802.1x clients themselves give up after 100 miliseconds.

 

See the attached .pdf to get a better understanding of how different profiles are combined to result in the network configuration.

Since a network config is tied into a virtual-ap profile which can include different SSID and aaa profiles the short answer to your question is: Yes, Aruba supports per SSID authenticatio.

 

 

disclaimer: That .pdf is from an antiquated version (3.0) but the logic hasn't realy changed since so still current to get a basic understanding. It certainly does NOT include all the possible profiles !