Adding A New Server Group - Dell PowerConnect W-Airwave Configuration Manual

Adding a New Server Group

The server group is assigned to the server group for 802.1x authentication.
To create a new server group, click the
that group. The
Table 62:
Table 62 Security > Server Groups > Add or Edit Server Group Field Descriptions
Field
General Settings
Folder
Name
Other Settings
Fail Through
Add New Server
150 | Aruba Configuration Reference
Add
Add New Server Group
page appears, and contains the following fields, as described in
Default Description
Top Use this field to set and display the folder with which the server is
associated. The drop-down menu displays all folders available for
association with the server group.
Blank Enter the name of the server group.
No Enable or disable a fail through server.
When fail-through authentication is enabled, users that fail authentication on
the first server in the server list should be authenticated with the second
server. The controller attempts authentication with each server in the list until
either there is a successful authentication or the list of servers in the group is
exhausted.
This feature is useful in environments where there are multiple, independent
authentication servers; users may fail authentication on one server but can
be authenticated on another server.
N/A Click this button to add a new server to the Server Group being configured.
A new Server section and Server Group Server Rules section appear with
the following settings to be defined:
Server Section
Trim FQDN—Default setting is No. Change to Yes to enable.
You can use the "match FQDN" option for a server match rule. With a
match FQDN rule, the server is selected if the <domain> portion of the
user information in the formats <domain>\<user> or <user>@<domain>
exactly matches a specified string. Note the following caveats when
using a match FQDN rule:
Server Type—Select the server type for the new server being added.
Options are RADIUS (default), LDAP, TACACS, and Internal.
RADIUS Server—Select the RADIUS server from the drop-down menu
that the new server is to use. You can edit an existing RADIUS server or
create a new server.
Server Group Server Rules Section
Click the Add button to add a new rules section. The page that appears
contains the following settings to define:
Match Type—From the drop-down menu, select Authstring or FQDN.
The following settings complete the configuration.
Operator—For Authstring only, specify how to process the string
(contains, equals, starts with).
Match String—Enter the string or string fragment.
Finish by clicking the Add New Server Group Server Rules button.
button, or to edit an existing group, click the pencil icon next to
This rule does not support client information in the host/<pc-
name>.<domain> format, so it is not useful for 802.1x machine
authentication.
The match FQDN option performs matches on only the <domain>
portion of the user information sent in an authentication request. The
match-authstring option (described previously) allows you to match all
or a portion of the user information sent in an authentication request.
AirWave Wireless Management Suite | Configuration Guide