Wireless Access

When configuring a aaa-profile the inital roll should I be using denyall for preshared key ssid encryptions networks so firewall will not allow any access to the network?

For PSK your initial role should be set to the final role (allowing access) that the user will get when successfully authenticating

For PSK your initial role should be set to the final role (allowing access) that the user will get when successfully authenticating

I guess I was confused because the user guide says initial roll is the roll someone gets who is NOT authenticated. I'm assuming the reason it has no factor is if one doesn't have the encryption key they aren't able to get associated anyway? 

That's when you are doing a Captive Portal/ Layer 3 authentication , and in that case the initial role is the pre-auth/unauthenticated role

That's when you are doing a Captive Portal/ Layer 3 authentication , and in that case the initial role is the pre-auth/unauthenticated role