Authentication
In this section:
- Authentication Support MatrixIt is important to understand the compatibility between AAA servers and different WLANs.
- Creating Proxy Authentication AAA
ServersA proxy AAA server is used when APs send authentication or accounting messages to the controller and the controller forwards these messages to an external AAA server.
- harp://6a7214064c282d8ad6c44b90/pr/ORIGINAL/RUCKUS%20SmartZone%20(ST-GA)%20Access%20and%20Security%20Services%20Guide,%207.0.0_v6_GUID-06CC8DAE-E537-459A-A02B-EAB135619EA1/RADIUS%20Service%20Options=GUID-AF261AF3-D88C-4195-A6DF-C11E3170BEEE=6=en-US=.xml
- harp://6a7214064c282d8ad6c44b90/pr/ORIGINAL/RUCKUS%20SmartZone%20(ST-GA)%20Access%20and%20Security%20Services%20Guide,%207.0.0_v6_GUID-06CC8DAE-E537-459A-A02B-EAB135619EA1/Enabling%20ECDSA%20Certificates%20Support%20for%20RADIUS%20with%20Transport%20Layer%20Security=GUID-7722A6EB-413A-47C6-8790-A72ABF410E6C=3=en-US=.xml
- harp://6a7214064c282d8ad6c44b90/pr/ORIGINAL/RUCKUS%20SmartZone%20(ST-GA)%20Access%20and%20Security%20Services%20Guide,%207.0.0_v6_GUID-06CC8DAE-E537-459A-A02B-EAB135619EA1/Vendor%20Specific%20Attribute%20Profile=GUID-5543395E-7F81-4056-9D38-F370CBA9896B=1=en-US=.xml
- harp://6a7214064c282d8ad6c44b90/pr/ORIGINAL/RUCKUS%20SmartZone%20(ST-GA)%20Access%20and%20Security%20Services%20Guide,%207.0.0_v6_GUID-06CC8DAE-E537-459A-A02B-EAB135619EA1/Creating%20a%20Vendor-Specific%20Attribute%20Profile=GUID-442B0442-4AFF-4CEC-9C50-057666516410=6=en-US=.xml
- Associating a VSA Profile to a WLAN ConfigurationPerform the following procedure to associate a VSA profile to a WLAN configuration.
- harp://6a7214064c282d8ad6c44b90/pr/ORIGINAL/RUCKUS%20SmartZone%20(ST-GA)%20Access%20and%20Security%20Services%20Guide,%207.0.0_v6_GUID-06CC8DAE-E537-459A-A02B-EAB135619EA1/Viewing%20RADIUS%20Proxy%20Settings=GUID-C173135D-FBE7-4DB1-B147-C232FE35CBBD=6=en-US=.xml
- Creating Non-Proxy Authentication AAA
ServerA non-proxy AAA server is used when APs connect to the external AAA server directly.
- harp://6a7214064c282d8ad6c44b90/pr/ORIGINAL/RUCKUS%20SmartZone%20(ST-GA)%20Access%20and%20Security%20Services%20Guide,%207.0.0_v6_GUID-06CC8DAE-E537-459A-A02B-EAB135619EA1/Non-Proxy%20(Social%20Login)=GUID-1EC12B3F-02F8-4ABD-9C58-2E99199CDDF1=1=en-US=.xml
- Creating Social Media Login ProfileWhen end-user associated with an OAuth 2.0 WLAN, launches his browser. AP redirects it to the OAuth 2.0 provider login page. The end-user should enter his account and password to authenticate with OAuth 2.0 provider. AP sets the end-user status as authenticated and user is able to use internet.
- Creating Realm Based Authentication ProfileAn authentication profile defines the authentication policy when the controller is used as a Radius proxy service for WLANs.
- harp://6a7214064c282d8ad6c44b90/pr/ORIGINAL/RUCKUS%20SmartZone%20(ST-GA)%20Access%20and%20Security%20Services%20Guide,%207.0.0_v6_GUID-06CC8DAE-E537-459A-A02B-EAB135619EA1/Fast%20Link%20Initial%20Setup=GUID-FD491A00-C12D-4055-95E5-F4F19CCCA256=2=en-US=.xml
- Create Fast Initial Link Setup (FILS) Realm
ProfileComplete the following steps to create Fast Initial Link Setup (FILS) Realm Profile.
Parent topic: AAA