Authentication And User Management; Managing Iap Users; User Privileges - Aruba IAP-335 User Manual

This chapter provides the following information:
Managing IAP Users on page 143
l
Supported Authentication Methods on page 148
l
Supported EAP Authentication Frameworks on page 150
l
Configuring Authentication Servers on page 151
l
Understanding Encryption Types on page 164
l
Configuring Authentication Survivability on page 166
l
Configuring 802.1X Authentication for a Network Profile on page 167
l
Enabling 802.1X Supplicant Support on page 169
l
Configuring MAC Authentication for a Network Profile on page 170
l
Configuring MAC Authentication with 802.1X Authentication on page 172
l
Configuring MAC Authentication with Captive Portal Authentication on page 174
l
Configuring WISPr Authentication on page 175
l
Blacklisting Clients on page 176
l
Uploading Certificates on page 179
l

Managing IAP Users

The IAP users can be classified as follows:
Administrator—An admin user who creates SSIDs, wired profiles, and DHCP server configuration
l
parameters; and manages the local user database. The admin users can access the VC Management UI.
Guest administrator—A guest interface management user who manages guest users added in the local user
l
database.
Administrator with read-only access—The read-only admin user does not have access to the Instant CLI. The
l
Instant UI will be displayed in the read-only mode for these users.
Employee users—Employees who use the enterprise network for official tasks.
l
Guest users—Visiting users who temporarily use the enterprise network to access the Internet.
l
The user access privileges are determined by IAP management settings in the AirWave Management client and
Aruba Central, and the type of the user. The following table outlines the access privileges defined for the admin
user, guest management interface admin, and read-only users.
Table 31: User Privileges
User Category
administrator
read-only
administrator
guest administrator
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
Aruba Central or AMP in
Management Mode
Access to local user database only
No write privileges
Access to local user database only

Authentication and User Management

IAP in Monitor Mode or without AMP
or Aruba Central
Complete access to the IAP
No write privileges
Access to local user database only
Authentication and User Management |
Chapter 13
143