Configuring Cloud Authentication and Policy Server in a WLAN Network

The Cloud Authentication and Policy server in a WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. network must be configured in Aruba Central, to provide seamless wireless network connection to the end-users and client device. With Aruba Central, you can configure the Cloud Authentication and Policy server at various security levels in the Security tab.

To configure Cloud Authentication and Policy server in a WLAN network, complete the following steps:

1. In the Aruba Central app, set the filter to a group containing at least one AP.

   The dashboard context for the group is displayed.

2. Under Manage, click Devices > Access Points.

   A list of APs is displayed in the List view.

3. Click the Config icon.

   The tabs to configure the APs are displayed.

4. Click the WLANs tab.

   The WLANs details page is displayed.

5. In the WLANs tab, click + Add SSID.

   The Create a New Network page is displayed.

6. In the General tab, enter a name in the Name (SSID) text-box.
7. Select a check box to specify the band Band refers to a specified range of frequencies of electromagnetic radiation. at which the network transmits radio signals in the Band. You can set the band to 2.4 GHz, 5 GHz, or 6 GHz.
8. Under Advanced Settings, configure the advanced settings parameters for an SSID Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network.. For more information, see Advanced Settings Parameters.

   Hidden SSID is not supported for Cloud Authentication Cloud Authentication and Policy allows you to configure user and client access policies that provide a secured, cloud-based network access control (NAC). and Policy.

9. Click Next.
10. Under VLANs, configure the VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. settings for an SSID. For more information, see Configuring VLAN Settings for Wireless Network.
11. Click Next.
12. In the Security tab, select one of the following security level:

    • Setting up 802.1X 802.1X is an IEEE standard for port-based network access control designed to enhance 802.11 WLAN security. 802.1X provides an authentication framework that allows a user to be authenticated by a central authority. network access:

      • Select Enterprise in the Security Level slider and then enter values for the following parameters:
        1. Key Management—Select an encryption key from the drop-down list.
        2. Primary Server—Select CloudAuth from the drop-down list.

           WPA3-Enterprise (GCM 256) and WPA3-Enterprise (CNSA) encryption keys are not supported with CloudAuth Cloud Authentication and Policy allows you to configure user and client access policies that provide a secured, cloud-based network access control (NAC). as most of the client devices do not support these two modes.

    • Setting up MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network.  authentication network access:
      • Select Personal in the Security Level slider and then specify the following parameters:
        1. Key Management—Select an encryption key from the drop-down list.

        In the Key Management drop-down list, only WPA2-Personal, WPA3-Personal, and Both (WPA2 & WPA) encryption keys are supported. For more information on WPA2 Wi-Fi Protected Access 2. WPA2 is a certification program maintained by IEEE that oversees standards for security over wireless networks. WPA2 supports IEEE 802.1X/EAP authentication or PSK technology, but includes advanced encryption mechanism using CCMP that is referred to as AES./WPA3 modes, see Support for WPA2/WPA3 Mode.

        2. Passphrase Format—Select 8-63 charsor 64 chars passphrase format from the drop-down list.
        3. Passphrase—Specify a passphrase in the text-box.
        4. Retype—Retype the passphrase to confirm in the text-box.
        5. Expand the Advanced Settings accordion and specify the following parameters:
        1. MAC Authentication—Enable the toggle switch to allow MAC authentication.

        If MAC Authentication toggle switch is disabled, Primary Server to select CloudAuth will not be available.

        2. Primary Server—Select CloudAuth from the drop-down list.
• Setting up MAC authentication network access (Open or Enhanced Open Key Management):
  • Select Open in the Security Level slider and then specify the following parameters:
    1. Key Management—Select an encryption key Open or Enhanced Open from the drop-down list.
    2. Expand the Advanced Settings accordion and specify the following parameters:
    1. MAC Authentication—Enable the toggle switch to allow MAC authentication.

    If MAC Authentication toggle switch is disabled, Primary Server to select CloudAuth will not be available.

    2. Primary Server—Select CloudAuth from the drop-down list.
  • For more information on advanced settings, see Configuring Security Settings for Wireless Network.
13. Click Next.
14. Under Access, configure the access settings for an SSID. For more information, see Configuring ACLs for User Access to a Wireless Network.

Only Role-Based and Unrestricted access levels are used for Cloud Authentication and Policy. Network based access is not used in Cloud Authentication and Policy.

15. Click Next.

The Summary tab displays all the settings configured in the General, VLANs, Security, and Access tabs.

16. Click Finish.