The LEPS-U profiles and LEPS-U users are configured in LANconfig under . The switch LEPS-U active enables the LEPS-U feature.
When configured in LEPS-U, each user who should be able to authenticate client devices on the WLAN receives an individual passphrase. This is done with LEPS-U profiles, which avoids having to repeat all of the settings for every new user. You then create the LEPS-U users with their individual passphrases and link them to one of the LEPS-U profiles created previously.
LEPS-U profiles
Configure LEPS-U profiles here and link them to an SSID. You can then assign the LEPS-U profiles to the LEPS-U users.
- Name
- Enter a unique name for the LEPS-U profile here.
- SSID
- Here you select the SSID or, in the case of a WLC, the logical WLAN network for which the LEPS-U profile is valid. The only users who can authenticate at the SSID or, in the case of a WLC, at the logical WLAN network are those who are connected to it via the LEPS-U profile.
- Client TX bandwidth limit
- Here you can set a transmission bandwidth limit in kbps for authenticating WLAN clients.
- Client RX bandwidth limit
- Here you can set a reception bandwidth limit in kbps for authenticating WLAN clients.
- VLAN-ID
- Here you specify which VLAN ID is assigned to a LEPS-U user who is connected to this profile.
LEPS-U users
Create individual LEPS-U users here. Each LEPS-U user must be linked with a previously created profile and assigned an individual WPA passphrase. Any client can then use this passphrase to authenticate at the SSID specified in the corresponding profile. The passphrase identifies the user, who is assigned to the VLAN specified in this table. If no VLAN is specified here, the user is assigned to the VLAN configured in the profile. Settings for the individual user thus take priority over settings in the profile.
There are platform-specific restrictions on the number of LEPS-U users created at the same time.
| Device | Users |
|---|---|
| L‑15x, L‑3xx, OAP‑32x, OAP‑8xx, IAP‑32x, IAP‑82x, LN‑630acn |
|
| L‑45x, L(N)‑8xx, L‑13xx, LN‑17xx |
|
- Name
- Enter a unique name for the LEPS-U user here.
- LEPS-U profiles
- Select the profile for which the LEPS-U user is valid. The only users who can authenticate at the SSID are those who are connected to it via the LEPS-U profile.
- Passphrase
- Here you can specify the passphrase to be used by LEPS-U users to authenticate at the WLAN.
Important: The passphrase can be a string of 8 to 64 characters. We recommend that the passphrases consist of a random string at least 32 characters long.
- Client TX bandwidth limit
- Here you can set a transmission bandwidth limit in kbps for authenticating WLAN clients. If no limit is configured here, the limitation configured in the LEPS-U profile (if any) applies. If a limit is configured in both the LEPS-U profile and for the LEPS-U user, the limit configured for the LEPS-U user applies.
- Client RX bandwidth limit
- Here you can set a reception bandwidth limit in kbps for authenticating WLAN clients. If no limit is configured here, the limitation configured in the LEPS-U profile (if any) applies. If a limit is configured in both the LEPS-U profile and for the LEPS-U user, the limit configured for the LEPS-U user applies.
- VLAN-ID
- Here you specify which VLAN ID is assigned to the LEPS-U user. If no VLAN-ID is configured here, the VLAN-ID configured in the LEPS-U profile (if any) applies. If a VLAN-ID is configured in both the LEPS-U profile and for the LEPS-U user, the VLAN-ID configured for the LEPS-U user applies.
