TABLE OF CONTENTS

Introduction to Profile

Introduction to Profile

This menu section is very important for defining network configuration, SSID settings, and Policies.

There are 3 sections under the "Profile" menu tab as follows.

1) Available profile

2) Attached profile

3) Published profile

First of all, we create a profile ( WLAN / RADIUS / Network Interface) and then attach that profile, and finally publish that attached profile, this is the standard procedure for Ray APs to enable SSID and other service enablement.

1) Available profile:

This part of the "Profile" tab is to create a new profile of radio, Tunnel interface Hotspot2.0 WLan, Network interface,

IP reservation, Policy, and a Group.

for instance, as given in the above snapshot default radio profiles have been created automatically.

Click on the Action button and select the "View" option to check the configurations.

1.1 Radio

For the Vega model, it's 2 radio and 3 radio profiles by default.

Vega is 3 radio AP 1 radio 2.4 GHz and 2 radios 5 GHz.

Two Radio profile

Three Radio profile

there are other options in the "Action" button menu like "Attach", "Export", and "versions" as given in the following snapshot.

After creating a profile, you need to attach it, to attach a created profile you required to click on the "Attach" option.

Attach: As soon as you "Attach" profile it will appear in the "Attached Profile section tab just beside the "Available profile".

Export: You can export the created profile by clicking on the "Export" option, which will be in the "JSON" format.

Versions: "Versions" actually, shows the last configuration based profile versions, so you can revoke the most suitable

profile configuration version which you don't need to stress about remembering it.

1.2 AP Settings

Mostly this part doesn't need to be configured, as it is having default configurations of the AP like Network time protocol,

and the AP console password, which is rarely needed to be changed.

Following is the Ap settings template where NTP can be defined and if required AP's console password can be changed

Note: Make sure to make a note of AP's console password in case if you change here.

1.3 Radius

To integrate with enterprise authentication mechanisms like AD, LDAP, this section is very helpful.

Pre-requisites to configure a Radius profile are as following:

1. Radius Authentication Server IP

2. Radius Authentication Server Port

3. Radius Authentication Secret

For a testing purpose only, we have used "Jump cloud" radius configurations to create a test Radius profile.

1.4 Tunnel Interface

To create a tunnel interface for SD-WAN, GRE, and OpenVPN this section will be helpful.

1.4.1 SD-WAN tunnel profile:

Pre-requisites to create an SD-WAN profile are as shown in the below snapshots.

Fig.A SD-WAN template general details

Fig.B SD-WAN template configuration details

1.4.2 GRE tunnel profile:

Pre-requisites to create a GRE tunnel profile are displayed in the template in the below snapshot.

1.4.3 OpenVPN profile:

Pre-requisites to create an OpenVPN profile are displayed in the template in the below snapshot.

1.5 Hotspot 2.0

1.6 WLAN

This section is very useful while creating SSID profiles.

In most common scenarios, the red box marked fields are the only needs to be taken care of.

Refer to the WLAN profile creation article for more information. WLAN Profile Creation

1.6.1 Security

A security field is having 3 password authentication methods

1) None / Open:

No password required, mostly used for the Captive portal-based access scenario otherwise it is recommended to be applied.

2) Password Authentication :

This is a very common configuration in most of the cases, password-based authentication has 3 encryption

methods available. WPA2 / WPA3 / WPAx

3) Enterprise Authentication

Enterprise authentication requires pre-requisites as per below.

Need to create a Radius profile under the "Radius" tab with the following parameters given in the pre-requisite list.

1. Radius Authentication Server IP

2. Radius Authentication Server Port

3. Radius Authentication Secret

Assumptions :

The NPS Radius server will be reachable by the Access Point

1.7 Network Interface

The network interface is playing a very important part while creating a new WLAN profile.

Interface selection can be vary based on the scenario you have in your infrastructure.

Refer to the below-given article explaining in detail about for which case what Interface needs to be configured.

Network interface selection

1.8 IP Reservation

IP reservation provides the facility to create a reservation list for the permanent devices, which will be connecting a regular basis or you want it to get a constant IP address. Not only IP reservation but you can also use port forwarding

as per the snapshot below.

1.9 Policy

This feature will be only enabled if you have an enterprise subscription activated.

It provides 4 category based policies, as marked in Fig.B.

Speed Policy / Content Policy / Time Policy / Quota Policy.

Refer to these documents to understand all the policies in detail. Enterprise Policies and Understanding Policy

Fig. A

Fig.B

1.10 Group

To apply policies to a particular group the "Group" profile is the key feature to perform such operation.

For the detailed explanation refer to this document, Understanding Groups.

2) Attached profile:

First of all, we need to understand what is "Attached Profile".

"Attached profile" is like an Activated profile, which is ready to be published or pushed to the AP for SSID broadcast

of service readiness.

Menu Items are similar to the "Available Profile", just the menu of the attached profile will be different as it is activated so it will be pointing to the "Publish" mode.

2.1 Radio

Here in the "Action button" menu, publish options are given, which gives granule level of profile publishing

to the particular level of the cluster.

For instance, this profile is created under the main cluster and it has 4 more child clusters and each child clusters have 2 sub child clusters each, then we have a choice of if we want to just publish it on the main cluster, or all child

clusters down under the main cluster or if we want to publish it in particular clusters then it is also possible,

we will see that portion in the WLAN profile section.

2.2 AP Settings

The same thing with AP Settings, the Attached profile will appear here under the Attached profile --> AP settings.

2.3 Radius

Once the radius profile is created and Attached ( Activated) it will appear under the Attached profile --> Radius tab.

And the Action button menu is having "Detach" options displaying.

2.4 Tunnel Interface

Once we have the Tunnel interface created and "Attached" it will appear under the "Attached profile" of the Tunnel interface.

2.5 Hotspot 2.0

After Hotspot profile creation and Attachment / Activation, it will showcase hereunder

the Attached profile --> Hotspot 2.0 tab.

2.6 Wlan

WLAN created and triggered the action of "Attach" in the "Available profile" tab, that will make the WLAN profile appearance under "Attached Profile" --> Wlan and with various "Publish" related options available just like marked

in the below snapshot.

Just "Publish" means, it would give you an option open to chose your cluster under which you want to publish this profile.
"Publish in the current cluster" will by default publish profile to the current cluster only.
"Publish in All" would publish this particular profile in the current and child/sub child cluster of your root / main cluster from where you are publishing this profile.
"Unpublish" is to Unpublish the profile from your choice of the cluster.
"Unpublish in the current cluster" will trigger an action to unpublish the profile from the current clusters from where it was published earlier.
"Unpublish in all" will trigger an action to unpublish the profile from all the clusters.

Unpublish options are also available under the "Published Profile" tab --> WLAN --> WLAN profile action button.

2.7 Network Interface

By default, we don't need to create any Network interface profile for a simple plain scenario for a Network without VLANs. Refer to the Network Interface selection understanding document for more information about interface selection for different modes of Ray AP.

Fig - A, If the profile is created and Attached/activated then it will have menu options and status just like marked

in below snapshot, if it is not published then the status will not show anything int the column.

All the published profiles are having an "Orange" tick mark and the profile which has just been attached but not been published will not have that "Orange" tick mark in the status column.

Fig - A

In the below snapshot Fig-B, the published profile is marked and menu items have been highlighted.

once an attached/activated profile is published it will start appearing in the "Publish Profile" tab --> Network interface section. and it will be having a status mark as an Orange tick mark and menu options like shown in the below snapshot.

Fig - B,

2.8 IP reservation

If we have the IP reservation created and "Attached" it will appear under the "Attached profile" of the IP reservation.

2.9 Policy

Once we have the Policy /Policies created and "Attached" it will appear under the "Attached profile" of the "Policy" tab.

the created and attached policies will have the option "Detach" appears in the Action button menu as marked with an arrow in the below snapshot.

2.10 Group

The created and attached "Attached" will appear under the "Attached profile" of the "Group" tab.

3) Published profile:

Understanding the "Published Profile", once Created profile "Attached" then it is ready to be "Published" / pushed to the AP.

Support

Introduction to Profile Print

Introduction to Profile