Advanced Profile Miscellaneous Configuration
Refer to the advanced profile‘s Miscellaneous menu item to set or override
a profile‘s NAS configuration. The profile database on the RADIUS server consists of
user profiles for each connected network access server (NAS) port. Each
profile is matched to a username representing a physical port.
Access point LED behavior and RF Domain management can also be
defined from the Miscellaneous screen.
To define or override a profile's miscellaneous configuration
attributes:
-
Select from the web UI.
-
Select a target device in the lower left-hand side
of the UI.
-
Select Advanced to expand its sub-menu items.
-
Select Miscellaneous.
The Settings tab displays by default.
-
Set a NAS-Identifier
Attribute up to 253 characters in length.
This is the RADIUS NAS-Identifier attribute that
typically identifies where a RADIUS message originates.
-
Set a NAS-Port-Id Attribute
up to 253 characters in length.
This is the RADIUS NAS port ID attribute
which identifies the device port where a RADIUS message originates.
-
Select Turn on LEDs to enable an adopted access point‘s
LEDs.
This feature is enabled by default.
-
Select Flash Pattern to enable the access point to blink
in a manner different from its operational LED behavior.
Enabling this option allows an administrator to validate that the access
point has received its configuration from its managing controller during
staging. In the staging process, the administrator adopts the access point to a
staging controller to get an initial configuration before the access point is
deployed at its intended location. Once the access point has received its
initial configuration, its LED blinks in a unique pattern to indicate the
initial configuration is complete.
-
Use the drop-down menu to configure the access point‘s Meshpoint
Behavior.
This field configures the access point‘s mobility behavior. The default
is External (fixed), which means that the mesh point is
fixed. The value vehicle-mounted means that the mesh point is
mobile. This feature is available only on an AP 7161 model access point.
-
Use Root Path Monitor Interval to configure the interval
to monitor the path to the root node.
-
Set the Additional Port value, in the RADIUS
Dynamic Authorization section, to enable a Cisco Identity
Services Engine (ISE) Authentication, Authorization and
Accounting (AAA) server to dynamically authenticate a client.
Set this value to 1700. The allowed port range is 1 to
65,535.
When a client device requests access to the network, the Cisco ISE RADIUS
server presents the client with a URL where a device‘s compliance is checked
for definition file validity (this form of file validity checking is called
posture). The check verifies, for example, that the
device's anti-virus or anti-spyware software is valid. If the device
complies, it is allowed access to the network.
-
Set the Aging Time value for Client
Bridge.
Use the spinner control to set a value in days, hours, minutes and
seconds.
-
Click OK to save the changes made
to the profile's advanced miscellaneous configuration.
Click Reset to revert to the last
saved configuration.