Configuring Web Portal WebAAA 467Configuring WebPortal WebAAATo configure Web Portal WebAAA:1 Configure an SSID or wired authentication port and set the fallthruauthentication type to web-portal. The default for SSIDs and for wiredauthentication ports is none.2 Configure individual WebAAA users. Because the VLAN is assigned basedon the service profile (where it is set by the attr vlan-name vlan-idoption) or web-portal-wired user (where it is set to default), MSSignores the VLAN-Name and Tunnel-Private-Group-ID attributes.However, MSS does assign other attributes if set.3 Configure web authentication rules for the WebAAA users.4 Save the configuration changes.Web Portal WebAAA Configuration ExampleThis example configures Web-Portal access to SSID mycorp.1 Configure the user VLAN on ports 2 and 3, and configure an IP interfaceon the VLAN:WX1200# set vlan mycorp-vlan port 2-3success: change accepted.WX1200# set interface mycorp-vlan ip 192.168.12.10255.255.255.0success: change accepted.The VLAN does not need to be configured on the switch where youconfigure Web Portal but the VLAN does need to be configured on aswitch somewhere in the Mobility Domain. The user’s traffic will betunneled to the switch where the VLAN is configured.2 Configure the service profile for SSID mycorp. Configuration includes thefollowing: Set the SSID name. Change the fallthru authentication type to web-portal. Set the default VLAN to mycorp-vlan (created in step 1.) MSS willplace Web-Portal users into this VLAN. Enable RSN (WPA2) data encryption with CCMP. (This exampleassumes clients support this encryption type.) TKIP is enabled bydefault and is left enabled in this example.WX1200# set service-profile mycorp-srvcprof ssid-name mycorpsuccess: change accepted.
