48 | Configuration Reference Dell PowerConnect W-AirWave 7.5 | Configuration Guide3. Select Add or Save. The added or edited AAA profile appears on the AAA Profiles page.Profiles > AAA > 802.1x Auth802.1x authentication consists of three components: The supplicant, or client, is the device attempting to gain access to the network. You can configure the DellPowerConnect W user-centric network to support 802.1x authentication for wired users as well as wirelessusers. The authenticator is the gatekeeper to the network and permits or denies access to the supplicants. The DellPowerConnect W-Series controller acts as the authenticator, relaying information between the authenticationserver and supplicant. The EAP type must be consistent between the authentication server and supplicant andis transparent to the controller. The authentication server provides a database of information required for authentication and informs theauthenticator to deny or permit access to the supplicant.The 802.1x authentication server is typically an EAP-compliant Remote Access Dial-In User Service (RADIUS)server which can authenticate either users (through passwords or certificates) or the client computer.An example of an 802.1x authentication server is the Internet Authentication Service (IAS) in Windows. (Seehttp://technet2.microsoft.com/windowsserver/en/technologies/ias.mspx.)SIP Authentication Role None Select the role to function for SIP authentication. The controller supports the statefultracking of session initiation protocol (SIP) authentication between a SIP client and aSIP registry server. Upon successful registration, a user role is assigned to the SIPclient. Select the add icon to create a new role, or click the pencil icon to edit anexisting role.This setting requires a voice service license.Enforce DHCP When you select this option, clients must obtain an IP using DHCP before they areallowed to associate to an AP. Enable this option when you create a user rule thatassigns a specific role or VLAN based upon the client device’s type.Note: If a client is removed from the user table by the “Logon user lifetime” AAA timer,then that client will not be able to send traffic until it renews its DHCP.Radius InterimAccountingBy default, the RADIUS accounting feature sends only start and stop messages to theRADIUS accounting server. Issue the interim-radius-accounting command to allowthe controller to send Interim-Update messages with current user statistics to theserver at regular intervals. Requires a minimum version of 6.1.0.0.Device TypeClassificationWhen you select this option, the controller will parse user-agent strings and attemptto identify the type of device connecting to the AP. When the device typeclassification is enabled, the Global client table shown in the Monitoring >Network >All WLAN Clients window shows each client’s device type, if that client device can beidentified. Requires a minimum version of 6.0.1.0.L2 Authentication FailthroughWhen MAC authentication fails, enable this option to perform 802.1x authentication.Requires a minimum version of 6.1.0.0.XML API ServersXML API Servers Select the XML API server to support the AAA profile being configured, if required.This section is blank if there are no XML API servers.RFC 3576 ServersRFC 3576 Servers Select the RFC 3576 RADIUS server to support the AAA profile being configured, ifrequired. This section is blank if there are no such servers.Table 9 Profiles > AAA > New AAA Profile Settings (Continued)Field Default Description
