Creating Proxy Authentication AAA Servers

• Name: Enter a name for the authentication service that you are adding.
• Friendly Name: Enter an alternative name that is easy to remember.
• Description: Enter a description for the authentication service.
• Service Protocol: Select the type of service protocol for the authentication service you are adding. Options are RADIUS, Active Directory, and LDAP.
  • If you select RADIUS, refer to RADIUS Service Options for more information.
  • If you select Active Directory, configure the following options:
    • Global Catalog: Select the Enable Global Catalog support if you want the Active Directory server to provide a global list of all objects.
    • Primary Server: For Encryption, select the Enable TLS Encryption check box if you want to use the Transport Layer Security (TLS) protocol to secure communication with the server.
      Note: You must also configure the Trusted CA certificates to support TLS encryption.
    • IP Address: Enter the IPv4 address of the Active Directory server.
    • Port: Enter the port number of the Active Directory server. The default port number (389) must not be changed unless you have configured the Active Directory server to use a different port.
    • Windows Domain Name: Enter the Windows domain name assigned to the Active Directory server (for example, domain.ruckuswireless.com).
  • If you select LDAP, configure the following options:
    1. Select Enable TLS Encryption check box, if you want to use the Transport Layer Security (TLS) protocol to secure communication with the server.
       Note: You must also configure the Trusted CA certificates to support TLS encryption.
    2. IP Address: Enter the IPv4 address of the LDAP server.
    3. Port: Enter the port number of the LDAP server.
    4. Base Domain Name: Enter the base domain name in LDAP format for all user accounts (for example, dc=ldap,dc=com).
    5. Admin Domain Name: Enter the administrator domain name in LDAP format (for example, cn=Admin;dc=Your Domain,dc=com).
    6. Admin Password: Enter the administrator password for the LDAP server.
    7. Confirm Password: Re-enter the administrator password to confirm.
    8. Key Attribute: Enter a key attribute to denote users (for example, default: uid).
    9. Search Filter: Enter a search filter (for example, objectClass=Person).
• User Role Mapping:
  6.0 update
  Note: While mapping group attribute value to a user role, avoid special characters, wild-card entries, or duplicate entries regardless of the order. Only the firs-matched entry will be mapped to the user role.
  1. Click +Create. The Create User traffic Profile Mapping dialog box is displayed.
  2. In the Group Attribute Value field, enter the value to be sent from AAA as part of an Access-Accept.
  3. Select a User Role from the list or click to create a new user role. For more information, refer to User Roles in the RUCKUS SmartZone User Management Guide.
  4. Click OK.

The mapped user profile is listed.