Wireless Access

Want to setup RADIUS authentication for admin access to the console.  The userguide is not too clear.  Can somebody help?  I added the RADIUS server(s) via the AMP Setup>Authentication page.  Also setup a policy on the RADIUS server. 

CJoseph answered this question for someone else several weeks ago.

Search the Airwave Board for "Radius for management users" and follow his link to  http://support.arubanetworks.com/AirWaveKB/tabid/115/Default.aspx

I followed those instructions and it's working great!

--Matthew

---

@msabin wrote:

CJoseph answered this question for someone else several weeks ago.

Search the Airwave Board for "Radius for management users" and follow his link to  http://support.arubanetworks.com/AirWaveKB/tabid/115/Default.aspx

 

I followed those instructions and it's working great!

--Matthew

---

Msabin,

Thanks.  The url structure in the Airwave KB can be a challenge, so i will just attach the doc.

Attachment(s)

Management Authentication using Windows 2008 as a Radius ...pdf   565 KB 1 version

works like a charm...thanks..  what about a setup guide for RADIUS or TACACs for the controllers?

Chapter 33 of the ArubaOS 6.1 User guide details management Authentication.  You will find a Step by Step Guide there.

I dont see the server side setup?

---

@RR8 wrote:

I dont see the server side setup?

---

I see below in page 595.  What's on your page 595?

Radius Server Authentication
Radius Server Username/Password Authentication
In this example, an external RADIUS server is used to authenticate management users. Upon authentication, users are assigned the default role root.
In the WebUI
1. Navigate to the Configuration > Security > Authentication > Servers page.
2. Select RADIUS Server to display the Radius Server List.
a. To configure a RADIUS server, enter the name for the server (for example, rad1) and click Add.
b. Select the name to configure server parameters, such as IP address. Select the Mode checkbox to
activate the server.
c. Click Apply.
3. Select Server Group to display the Server Group list.
a. Enter the name of the new server group (for example, corp_rad) and click Add.
b. Select the name to configure the server group.
c. Under Servers, click New to add a server to the group.

yes, thats for the controller side.  Any special settings for the Windows Server side?

Ah.  Sorry about that.

I don't see anything very specific, I'm attaching a document that was written for IAS, but details the server side of things, and can be easily ported to NPS.  It is almost identical to the Radius server setup for Airwave that was detailed in the thread above.

Attachment(s)

Management-Authentication-using-Windows-IAS-as-a-Radius-S...pdf   951 KB 1 version

great..thats what i was looking for..thanks!

Hi,

is there an information about the attribute values for the Vendor-assigned attribute?

Or is there another possibility to assign different roles (root, guest-provisioning) on the NPS when used as RADIUS server for management authentication on the controllers?

So you mean:

- attribue number = 3

- attribute format = string

- attribute value = root / guest-provisioning / ...

...instead of the values on the picture provided by one of the guides, is that right? That would be quite cool.