500 Configuring AAA for network usersNN47250-500 (320657-F Version 02.01)Network requirementsThe VLAN where users will be placed must have an IP interface, and the subnet the interface is in must have access toDHCP and DNS servers.WSS recommendations• Consider installing a Web-based AAA certificate signed by a trusted CA, instead of one signed by the WSS itself.Unless the client’s browser is configured to trust the signature on the switch’s Web-based AAA certificate, displayof the login page can take several seconds longer than usual, and might be interrupted by a dialog asking the userwhat to do about the untrusted certificate. Generally, the browser is already configured to trust certificates signed bya CA.Client NIC recommendations• Configure the NIC to use DHCP to obtain its IP address.Client Web browser recommendations• Use a well-known browser, such as Internet Explorer (Windows), Firefox (Mozilla-based), or Safari (Macintosh).• If the Web-based AAA certificate on the WSS is self-signed, configure the browser to trust the signature byinstalling the certificate on the browser, so that the browser does not display a dialog about the certificate each timethe user tries to log on.
