Aruba IAP-335 User Manual page 132

Table 28: External Captive Portal Configuration Parameters
Parameter
Delimiter character
Uppercase support
Authentication server
Reauth interval
Accounting mode
Accounting interval
Blacklisting
Max authentication
failures
Walled garden
Disable if uplink type
is
Encryption
5. Click Next to continue and then click Finish to apply the changes.
132 | Captive Portal for Guest Access
Description
Specify a character ( for example, colon or dash) as a delimiter for the MAC address string.
When configured, the IAP will use the delimiter in the MAC authentication request. For
example, if you specify colon as the delimiter, MAC addresses in the xx:xx:xx:xx:xx:xx
format are used. If the delimiter is not specified, the MAC address in the xxxxxxxxxxxx
format is used.
NOTE: This option is available only when MAC authentication is enabled.
Set to Enabled to allow the IAP to use uppercase letters in MAC address string for MAC
authentication.
NOTE: This option is available only if MAC authentication is enabled.
To configure an authentication server, select any of the following options:
If the server is already configured, select the server from the list.
l
To create new external RADIUS server, select New. For more information, see
l
Configuring an External Server for Authentication on page
Specify a value for the reauthentication interval at which the IAPs periodically
reauthenticate all associated and authenticated clients.
Select an accounting mode from the Accounting mode drop-down list for posting
accounting information at the specified Accounting interval. When the accounting mode
is set to Authentication, the accounting starts only after client authentication is successful
and stops when the client logs out of the network. If the accounting mode is set to
Association, the accounting starts when the client associates to the network successfully
and stops when the client is disconnected.
Configure an accounting interval in minutes within the range of 0–60, to allow IAPs to
periodically post accounting information to the RADIUS server.
If you are configuring a wireless network profile, select Enabled to enable blacklisting of
the clients with a specific number of authentication failures.
If you are configuring a wireless network profile and Blacklisting is enabled, specify the
maximum number of authentication failures after which users who fail to authenticate
must be dynamically blacklisted.
Click the link to open the Walled Garden window. The walled garden configuration
determines access to the websites. For more information, see
Access on page 141.
Select the type of the uplink to exclude.
Select Enabled to configure encryption settings and specify the encryption parameters.
156.
Configuring Walled Garden
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide