Dell PowerConnect W-7200 Series Reference Manual page 1439

Parameter
dialer
max-sessions
no
pool
<name>
reauthentica
tion-interval
session-acl
<string>
ap-group
position
stateful-ntlm
vlan
wispr
Usage Guidelines
Every client in a user-centric network is associated with a user role. All wireless clients start in an initial role. From
the initial role, clients can be placed into other user roles as they pass authentication.
Example
The following command configures a user role:
(host) (config) #user-role new-user
dialer default-dialer
pool pptp-pool-1
Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Description
If VPN is used as an access method, name of the VPN dialer
configured with the vpn-dialer command. The user can login using
captive portal and download the dialer. The dialer is a Windows
application that configures the VPN client.
Maximum number of datapath sessions per user in this role.
Negates any configured parameter.
If VPN is used as an access method, specifies the IP address pool
from which the user's IP address is assigned:
l2tp: When a user negotiates a Layer-2 Tunneling Protocol (L2TP)/
IPsec session, specifies an address pool configured with the ip local
pool command.
pptp: When a user negotiates a Point-to-Point Tunneling Protocol
(PPTP) session, specifies an address pool configured with the pptp ip
local pool command.
Name of the L2TP or PPTP pool to be applied.
Interval, in minutes, after which the client is required to
reauthenticate.
Session ACL configured with the ip access-list session command. You
can specify both IPv4 and IPv6 ACLs.
(Optional) AP group to which this ACL applies.
(Optional) Position of this ACL relative to other ACLs that you can
configure for the user role. 1 is the top.
Apply stateful NTLM authentication to the specified user role
Identifies the VLAN ID or VLAN name to which the user role is
mapped. This parameters works only when using Layer-2
authentication such as 802.1X or MAC address, ESSID, or encryption
type role mapping because these authentications occur before an IP
address is assigned. If a user authenticates using a Layer-3
mechanism such as VPN or captive portal this parameter has no
effect.
NOTE: VLAN IDs and VLAN names cannot be listed together.
Apply WISPr authentication to the specified user role.
Range Default
— —
0-65535 65535
— —
— —
— —
0-4096, 0 0
(dis-
to
abled)
disable
— —
— —
— (last)
— —
user-role | 1439