Brocade Mobility RFS Controller System Reference Guide (Supporting software release 5.5.0.0 and later) User Manual

Page 301

Advertising
background image

Brocade Mobility RFS Controller System Reference Guide

289

53-1003099-01

6

FIGURE 26

WLAN Policy Advanced screen

4. Refer to the Protected Management Frames (802.11w) field to set a frame protection mode

and security association for the WLAN’s advanced configuration.

5. Refer to the Advanced RADIUS Configuration field to set the WLAN’s NAS configuration and

RADIUS Dynamic Authorization.

6. Enable Fast BSS Transition to enable fast BSS transition (802.11r fast roaming). This setting is

disabled by default.

Mode

Select a radio button for the mode (either Disabled, Optional or Mandatory). Disabled is the default
setting.

SA Query Attempts

Use the spinner control to set the number of security association query attempts between 1-10.
The default value is 5.

SA Query Retry Timeout

Set the timeout (from 100-1,000 milliseconds) for waiting for a response to a SA query before
resending it. The default is 201 milliseconds.

NAS Identifier

Specify what’s included in the RADIUS NAS-Identifier field for authentication and accounting
packets relating to this WLAN. Configuring a value is optional, and defaults are used if not
configured.

NAS Port

The profile database on the RADIUS server consists of user profiles for each connected network
access server
(NAS) port. Each profile is matched to a username representing a physical port.
When authorizing users, it queries the user profile database using a username representative of
the physical NAS port making the connection. Set the numeric port value from 0-4,294,967,295.

RADIUS Dynamic
Authorization

Select the check box to enable a mechanism that extends the RADIUS protocol to support
unsolicited messages sent from the RADIUS server. These messages allow administrators to issue
change of authorization (CoA) messages, which affect session authorization, or Disconnect
Messages (DM)
, which terminated a session immediately. This feature is disabled by default.

Advertising