Aerohive access point, Deployment Manual

Page: 168 / 221

Deployment Guide 167
E
XAMPLE
4: P
RIVATE
PSK
S
Private PSK User Groups
You next create two private PSK user groups, one for employees and another for contractors.
To create a private PSK user group for employees, click Configuration > Advanced Configuration >
Authentication > Local User Groups > New, enter the following, and then click Save:
User Group Name: Employees(30)
Including the attribute number in the private PSK user group name and in the user profile name
makes it easier to match them when configuring the SSID.
Description: Corp employees
User Type: Manually created private PSK users
User Profile Attribute: 30
This must be the same number as the user profile "Employees(30)".
VLAN ID: 1
If you leave this field empty, the HiveAP applies the VLAN ID set in the Employees(30) user profile,
which is already set as 1. If you set a different VLAN ID here than the one in the user profile, this
setting takes precedence over the one in user profile.
Reauthorization Time: 1800 (default)
This setting is only used when private PSK user accounts are stored on a RADIUS server and a
reauthorization interval is not set on the server for those users. If user accounts are stored on a
RADIUS server that returns a reauthorization interval attribute, the HiveAPs use that value instead
of this one. If user accounts are stored locally on HiveAPs, the HiveAPs ignore this setting.
To create a private PSK user group for contractors, click Configuration > Advanced Configuration >
Authentication > Local User Groups > New, enter the following, and then click Save:
User Group Name: Contractors(35)
Description: Contractors at corp
User Type: Manually created private PSK users
User Profile Attribute: 35
VLAN ID: 1
Reauthorization Time: 1800 (default)
Note: If you want to define advanced options, click + to expand the Private PSK Advanced Options section.
You can modify the characteristics of keys that HiveManager generates, such as their length, the types
of characters used in them, the method of their generation, and the period of time during which they
are valid. This example uses the default settings, one of which is the requirement that the password in
the imported .csv file must contain letters, digits, and special characters. This requirement has
significance in the next section,
"Importing Private PSK Users" on page 168