Table of Contents
Advertisement
14. Select
Heartbeat
15. Select the
Service Watchdog
and running and capable of effectively interoperating. The Service Watchdog is enabled by default.
16. Select
OK
to save the changes and overrides made to the profile maintenance
to the last saved configuration.
5.10.6 Overriding an Advanced Configuration
Refer to the Advanced device settings to set or override a profile's MiNT and/or NAS configurations.
MINT provides the means to secure controller profile communications at the transport layer. Using MINT, a device can be
configured to only communicate with other authorized (MINT enabled) devices. Access point managed devices can
communicate with each other exclusively over a MINT security domain. Keys can also be generated externally using any
application (like openssl). These keys must be present on the managed device managing the domain for key signing to be
integrated with the UI. A MAP device that needs to communicate with another first negotiates a security context with that
device. The security context contains the transient keys used for encryption and authentication. A secure network requires
users to know about certificates and PKI. However, administrators do not need to define security parameters for access
points to be adopted (secure WISPe being an exception, but that isn't a commonly used feature). Also, users can replace
any device on the network or move devices around and they continue to work. Default security parameters for MiNT are
such that these scenarios continue to function as expected, with minimal user intervention required only when a new
network is deployed.
The profile database on the RADIUS server consists of user profiles for each connected network access server (NAS) port.
Each profile is matched to a username representing a physical port. When users are authorized, it queries the user profile
database using a username representative of the physical NAS port making the connection.
To set or override an advanced configuration:
1. Select
Devices
from the Management menu.
Figure 5-157 Profile Overrides - Management Heartbeat screen
option to implement heartbeat messages to ensure other associated devices are up
from the Configuration menu.
Device Configuration 5 - 279
Heartbeat
tab. Select
Reset
to revert
Hide quick links:
Advertisement
Table of Contents
