Profiles > Aaa > Combined Vpn Auth; Profiles > Aaa > Management Auth - Dell PowerConnect W-Airwave Configuration Manual

Profiles > AAA > Combined VPN Auth
A VPN Authentication profile identifies the default role for authenticated VPN clients. This profile also
references a server group.
Before you enable VPN authentication, you must configure the authentication server(s) and server group that the
controller will use to validate the remote AP. When you provision the remote AP, you configure IPSec settings for
the AP, including the username and password. This username and password must be validated by an
authentication server before the remote AP is allowed to establish a VPN tunnel to the controller. The
authentication server can be any type of server supported by the controller, including the controller's internal
database.
Perform these steps to configure a Combined VPN Auth profile.
1. Select Profiles > AAA > Combined VPN Auth in the Dell PowerConnect W Navigation pane.
2. Select the Add button to create a new VPN Auth profile, or click the pencil icon next to an existing profile to
edit. Complete the settings as described in
Table 20
Field
General Settings
Folder
Name
Referenced Profiles
Server Group
Other Settings
Default Role
Max Authentication
failures (0-10)
Check Certificate
Common Name against
AAA Server
3. Select Add or Save. The added or edited Combined VPN Auth profile appears on the AAA Profiles page, and
on the VPN Auth details page.
Profiles > AAA > Management Auth
Users who need to access the controller to monitor, manage, or configure the Dell PowerConnect W user-centric
network can be authenticated with RADIUS, TACACS+, or LDAP servers or the internal database.
Perform these steps to configure a Management Auth profile.
1. Select Profiles > AAA > Management Auth in the Dell PowerConnect W Navigation pane.
64 | Configuration Reference
Dell PowerConnect W Configuration > Profiles > AAA > VPN Auth Profile Settings
Default
Top
Blank
default-vpn-role
0
Yes
Table 20:
Description
Set the folder with which the profile is associated. The drop-down menu displays all
folders available for association with the profile.
Enter the name of the profile.
Select the AAA authentication server group. Select the pencil icon to edit an
existing server group or click the add icon to create a new server group.
Select the role to be associated with this authentication profile.
Enter the number of times a station can fail to authenticate before it is blacklisted. A
value of 0 disables blacklisting.
This field appears if you are adding or modifying a RAP VPN Authentication Profile.
If you use client certificates for user authentication, enable this option to verify that
the certificate's common name exists in the server. This parameter is enabled by
default in the default-cap and default-rap VPN profiles, and disabled by default on
all other VPN profiles. Requires a minimum version of 6.1.0.0.
Dell PowerConnect W-AirWave 7.5 | Configuration Guide