Sending RADIUS Accounting to SafeConnect for Aruba Mobility Conrollers

Step-by-step guide

Add a new RADIUS Server

  • Navigate to 'Configuration > Security > Authentication > Servers'.

  • Click 'RADIUS Server' within the 'Servers' tab.

images/download/attachments/3922840/arubaRadiusAcct1.png

  • Enter a name for the RADIUS Server and select 'Add'.

images/download/attachments/3922840/arubaRadiusAcct2.png

Configure the RADIUS Server

    • Click on the newly created RADIUS Server to enter into the configuration options.

    images/download/attachments/3922840/arubaRadiusAcct3.png

      • Once in the configuration options, enter IP address of your SafeConnect Enforcer or Manager in a cluster as the host

      • Enter the desired value for the key (Shared Secret).

      images/download/attachments/3922840/arubaRadiusAcct4.png

      • Click the 'Apply' button located in the bottom right corner of the screen.

      Associate RADIUS Server to AAA Profile for the appropriate SSID

        • Navigate to the 'AAA Profiles' tab located under: 'Configuration > Security > Authentication > AAA Profiles'.

        images/download/attachments/3922840/arubaRadiusAcct5.png

        If you already have a RADIUS Accounting Group Configured for this SSID, please skip to step 5

        Add RADIUS Server to a 'new' RADIUS Accounting Server Group

          • If there is no RADIUS Accounting Group currently configured on this SSID, Select 'NEW' from the menu.

          images/download/attachments/3922840/arubaRadiusAcct6.png

            • Next to the word 'NEW' enter the desired name for the RADIUS Accounting Server Group.

            • Under 'Server Name', select the name of the RADIUS server created in the previous step from the drop down menu and then click 'Add Server'.

            images/download/attachments/3922840/arubaRadiusAcct7.png

              • To complete the procedure click the 'Apply' button.

              images/download/attachments/3922840/arubaRadiusAcct8.png

              Add RADIUS Server to an 'existing' RADIUS Accounting Server Group

              If there is an existing RADIUS Accounting Server Group, follow these steps to add to the existing server group.

                • If you have an existing RADIUS Accounting Server Group for this SSID, the newly created Accounting server will need to be added to this group.

                • Click on the RADIUS Accounting Server group for the SSID where you wish to enable Single Sign-On.

                • Click on the 'New' button under the 'Servers' list.

                images/download/attachments/3922840/arubaRadiusAcct9.png

                  • Under 'Server Name', select the name of the RADIUS server created in the previous steps from the pull down menu and click the 'Add Server' button.

                  images/download/attachments/3922840/arubaRadiusAcct10.png

                    • To complete the process click 'Apply'.

                    images/download/attachments/3922840/arubaRadiusAcct11.png

                    6. Gather Required Information

                      • The following information will be needed to complete the configuration:

                        • The Key (Shared Secret) gathered in the 'Configure the RADIUS Server' step above.

                        • The IP address of the RADIUS Client of the Aruba Controller.

                      • Navigate to Security -> Authentication -> Advanced.

                      • The IP address will be listed under RADIUS Client -> NAS IP address.

                      images/download/attachments/3922840/arubaRadiusAcct12.png