WPA Configuration Example WebUI

1
WPA Configuration ExampleWebUI
VLAN Configuration-gtNetwork-gtVLANs Add
Firewall policies Configuration-gtSecurity-gtAccess
Control-gtPolicies Add
AP system profile Configuration-gtAll
Profiles-gtAP-gt AP System Profile Add
User role Configuration-gtSecurity-gtAccess
Control-gt User Roles Add
Define Authentication Server Configuration-gtSecuri
ty-gtAuthentication-gt Severs ltServer Typegt Add
AP Group Configuration-gt AP Configuration New
Server group Configuration-gtSecurity-gtAuthenticati
on-gt Severs-gtServer Group Add
Assign VAP to AP Group Configuration-gtAP
Configuration ltAP-Group-Namegt Edit
802.1x Authentication Configuration-gtAll
Profiles-gtWireless LAN-gt 802.1x Authentication
Profile Add
AAA Configuration-gtAll Profiles-gt Wireless
LAN-gtAAA Profile Add
SSID Configuration-gtAll Profiles-gt Wireless
LAN-gtSSID Profile Add
Virtual AP Configuration-gtAll Profiles-gt Wireless
LAN-gtVirtual AP profile Add
Non-Profile Configuration
Security Profile Configuration
WLAN Configuration
AP Configuration
2
WPA Configuration ExampleCLI
VLAN vlan 200
Firewall policies ip access-list session
"EmployeeAccess" any any any permit queue low
AP system profile ap system-profile
Sunnyvale_APs lms-ip 192.168.252.1
bkup-lms-ip 192.168.250.1
User role user role Employee access-list
session EmployeeAccess
Define Authentication Server aaa
authentication-server RADIUS01 . . .
AP Group ap-group Sunnyvale_APs
Server group aaa server-group EmployeeRADIUS
auth-server RADIUS01
Assign VAP to AP Group ap-group Sunnyvale_APs
virtual-ap Employee_VAP ap-system-profile
802.1x Authentication aaa authentication dot1x
EmployeeDot1x termination eap-type eap-peap
AAA aaa profile Employee_AAA
dot1x-default-role logon authentication-dot1x
EmployeeDot1x
SSID wlan ssid-profile Employee_SSID essid
corp opmode wpa2-aes
Virtual AP wlan virtual-ap Employee_VAP aaa-profil
e Employee_AAA ssid-profile Employee_SSID vlan
200 forward-mode tunnel
Non-Profile Configuration
Security Profile Configuration
WLAN Configuration
AP Configuration
3
Captive Portal Configuration ExampleWebUI
VLAN Configuration-gtNetwork-gtVLANs Add
Firewall policies Configuration-gtSecurity-gtAccess
Control-gtPolicies Add
AP system profile Configuration-gtAll
Profiles-gtAP-gt AP System Profile Add
User role Configuration-gtSecurity-gtAccess
Control-gt User Roles Add
Define Authentication Server Configuration-gtSecuri
ty-gtAuthentication-gt Severs ltServer Typegt Add
AP Group Configuration-gt AP Configuration New
Server group Configuration-gtSecurity-gtAuthenticati
on-gt Severs-gtServer Group Add
Assign VAP to AP Group Configuration-gtAP
Configuration ltAP-Group-Namegt Edit
Captive Portal Authentication Configuration-gtAll
Profiles-gtWireless LAN-gt Captive Portal
Authentication Profile Add Server Group
ltServer Groupgt
SSID Configuration-gtAll Profiles-gt Wireless
LAN-gtSSID Profile Add
AAA Configuration-gtAll Profiles-gt Wireless
LAN-gtAAA Profile Add
Virtual AP Configuration-gtAll Profiles-gt Wireless
LAN-gtVirtual AP profile Add
Assign Captive Portal Profile Configuration-gtSecur
ity-gtAccess Control-gt User Roles ltGuest Rolegt
Edit
Non-Profile Configuration
Security Profile Configuration
WLAN Configuration
AP Configuration
4
Captive Portal Configuration ExampleCLI
VLAN vlan 900
Firewall policies ip access-list session
GuestAccess" any any any permit queue low
AP system profile ap system-profile
Sunnyvale_APs lms-ip 192.168.252.1
bkup-lms-ip 192.168.250.1
User role User-role guest access-list session
GuestAccess
Define Authentication Server aaa
authentication-server GuestAuthServer . . .
AP Group ap-group Sunnyvale_APs
Server group aaa server-group GuestAuthServers
auth-server GuestAuthServer
Assign VAP to AP Group ap-group Sunnyvale_APs
virtual-ap Employee_VAP ap-system-profile
Captive Portal Authentication aaa authentication
captive-portal GuestCP server-group internal
SSID wlan ssid-profile Guest_SSID essid
guest opmode opensystem
Virtual AP wlan virtual-ap Guest_VAP aaa-profile
Guest_AAA ssid-profile Guest_SSID vlan 900
forward-mode tunnel
AAA aaa profile Guest_AAA initial-role logon
Assign Captive Portal Profile User-role guest
captive-portal GuestCP
Non-Profile Configuration
Security Profile Configuration
WLAN Configuration
AP Configuration
5
WEP Configuration ExampleWebUI
VLAN Configuration-gtNetwork-gtVLANs Add
Firewall policies Configuration-gtSecurity-gtAccess
Control-gtPolicies Add
AP system profile Configuration-gtAll
Profiles-gtAP-gt AP System Profile Add
User role Configuration-gtSecurity-gtAccess
Control-gt User Roles Add
AP Group Configuration-gt AP Configuration New
Assign VAP to AP Group Configuration-gtAP
Configuration ltAP-Group-Namegt Edit
SSID Configuration-gtAll Profiles-gt Wireless
LAN-gtSSID Profile Add
Virtual AP Configuration-gtAll Profiles-gt Wireless
LAN-gtVirtual AP profile Add
Non-Profile Configuration
Security Profile Configuration
WLAN Configuration
AP Configuration
6
WEP Configuration ExampleCLI
VLAN vlan 200
Firewall policies ip access-list session
"EmployeeAccess" any any any permit queue low
AP system profile ap system-profile
Sunnyvale_APs lms-ip 192.168.252.1
bkup-lms-ip 192.168.250.1
User role user role Employee access-list
session EmployeeAccess
AP Group ap-group Sunnyvale_APs
Assign VAP to AP Group ap-group Sunnyvale_APs
virtual-ap Employee_VAP ap-system-profile
SSID wlan ssid-profile WEP_SSID wepkey1
deadbeef99 opmode static-wep
Virtual AP wlan virtual-ap WEP_VAP ssid-profile
WEP_SSID vlan 210 forward-mode tunnel
Non-Profile Configuration
Security Profile Configuration
WLAN Configuration
AP Configuration