Aruba Networks PowerConnect W Clearpass 100 Software Deployment Manual page 5

Chapter 5
ClearPass Guest 3.9 | Deployment Guide
Configuring Provisioning Settings .......................................................................89
Configuring Basic Provisioning Settings.......................................................90
Configuring Certificate Properties for Device Provisioning...........................90
Configuring Provisioning Settings for iOS and OS X ....................................93
Configuring Provisioning Settings for Mac OS X, Windows, and
Android Devices .....................................................................................94
Configuring User Interface Options for Mac OS X, Windows, and
Android Devices .....................................................................................96
Configuring Authorization Settings for Device Provisioning .........................96
Configuring Network Settings for Device Provisioning .......................................97
Configuring Basic Network Access Settings ................................................97
Configuring 802.1X Authentication Network Settings...................................99
Configuring Device Authentication Settings ...............................................100
Configuring Mutual Authentication Settings ...............................................100
Configuring Windows-Specific Network Settings.......................................102
Configuring Proxy Settings .........................................................................102
Configuring Post-Installation Instructions...................................................103
Configuring an iOS Device VPN Connection.....................................................104
Configuring an iOS Device Email Account ........................................................106
Configuring an iOS Device Passcode Policy.....................................................108
Resetting Onboard Certificates and Configuration ...........................................110
Advanced: Device Authentication During Provisioning .....................................110
Onboard Troubleshooting .................................................................................111
iOS Device Provisioning Failures ................................................................112
RADIUS Services ................................................................................. 113
Accessing RADIUS Services .............................................................................113
Server Control....................................................................................................113
RADIUS Log Snapshot................................................................................113
Debug RADIUS Server ................................................................................114
Viewing Failed Authentications ...................................................................114
Server Configuration..........................................................................................115
Example: Removing a User-Name Suffix....................................................117
Removing a Variable-Length Suffix ......................................................117
Example: Correcting the NAS-IP-Address Attribute ...................................117
Example: Adding a Reply-Message to an Access-Reject Packet ..............117
User Roles .........................................................................................................117
Creating a User Role ...................................................................................118
Adding Role Attributes ................................................................................119
Defining Attribute Tags ...............................................................................120
Adding Authorization Conditions to Attribute Definitions ...........................120
Example: Time of Day Conditions ........................................................121
Example: Time-Based Authorization ....................................................121
Example: Accounting-Based Authorization..........................................121
Calculating Attribute Value Expressions .....................................................122
Example: Using Request Attributes in a Value Expression ..................122
Example: Location-Specific VLAN Assignment....................................123
Configuring MAC Caching During User Authentication ..............................123
Network Access Servers ...................................................................................124
Creating a Network Access Server Entry....................................................125
Importing a List of Network Access Servers...............................................126
Web Logins........................................................................................................128
Creating a Web Login Page ........................................................................129
Universal Access Method (UAM) Password Encryption .............................134
NAS Redirect Parameters ...........................................................................134
| 5