Aruba - Integration Document
Overview
This document provides scripts to complete the integration of NAC with one more ArubaOS8 Mobility Controllers for Radius Based Enforcement.
Open Wireless Integration
x
conf t
aaa server-group "NAC_RBE_svrgrp"
auth-server "NAC_RBE" position 1
!
aaa server-group "NAC_Acct_svrgrp"
auth-server "NAC_Acct" position 1
!
aaa authentication mac "SC_Open_RBE_Mac_Auth"
delimiter none
case upper
!
aaa profile "NAC-Open_SSID"
initial-role "SC_Initial_Role"
authentication-mac "SC_Open_RBE_Mac_Auth"
mac-default-role "SC_Initial_Role"
mac-server-group "NAC_RBE_svrgrp"
dot1x-default-role "SC_Initial_Role"
radius-accounting "NAC_Acct_svrgrp"
radius-interim-accounting
rfc-3576-server <NAC-IP>
!
wlan ht-ssid-profile "NAC-Open-htssid_prof"
!
wlan ssid-profile "NAC-Open-ssid_prof"
essid "NAC-Open"
ht-ssid-profile "NAC-Open-htssid_prof"
!
wlan virtual-ap "NAC-Open-vap_prof"
aaa-profile "NAC-Open_SSID"
ssid-profile "NAC-Open-ssid_prof"
vlan <VLAN-ID>
!
ap-group "NAC"
virtual-ap "NAC-Open-vap_prof"
!
end
!
write memory
Secure Wireless Integration
conf t
aaa server-group "NAC_RBE_svrgrp"
auth-server "NAC_RBE" position 1
!
aaa server-group "NAC_Acct_svrgrp"
auth-server "NAC_Acct" position 1
!
aaa profile "NAC_Secure_SSID"
initial-role "SC_Initial_Role"
dot1x-default-role "SC_Initial_Role"
authentication-dot1x "NAC-dot1x_prof"
dot1x-server-group "NAC_RBE_svrgrp"
radius-accounting "NAC_Acct_svrgrp"
radius-interim-accounting
rfc-3576-server <NAC-IP>
!
wlan ht-ssid-profile "NAC_Secure-htssid_prof"
!
wlan ssid-profile "NAC_Secure-ssid_prof"
essid "NAC_Secure"
ht-ssid-profile "NAC_Secure-htssid_prof"
opmode wpa2-aes
!
wlan virtual-ap "NAC_Secure-vap_prof"
aaa-profile "NAC_Secure_SSID"
ssid-profile "NAC_Secure-ssid_prof"
vlan <VLAN-ID>
!
ap-group "NAC"
virtual-ap "NAC_Secure-vap_prof"
!
end
!
write memory
Was this page helpful?