Brocade Mobility Access Point System Reference Guide (Supporting software release 5.5.0.0 and later) - Manual (Page 390)

380 Brocade Mobility Access Point System Reference Guide
53-1003100-01
5
• Disable Dynamic Chain Selection (radio setting). The default value is enabled. This setting is
disabled from the Command Line Interface (CLI) using the
dynamic-chain-selection
command, or, in the UI (refer Radio Override Configuration .
• Disable A-MPDU Aggregation if the intended vehicular speed is greater than 30 mph. For more
information, see
Radio Override Configuration .
Overriding an Advanced Configuration
Device Overrides
Advanced device settings sets or overrides a profile’s MiNT and/or NAS configurations.
MINT secures controller profile communications at the transport layer. Using MINT, a device can be
configured to only communicate with other authorized (MINT enabled) devices. access point
managed devices can communicate with each other exclusively over a MINT security domain. Keys
can also be generated externally using any application (like openssl). These keys must be present
on the managed device managing the domain for key signing to be integrated with the UI. A MAP
device that needs to communicate with another first negotiates a security context with that device.
The security context contains the transient keys used for encryption and authentication. A secure
network requires users to know about certificates and PKI. However, administrators do not need to
define security parameters for access points to be adopted (secure WISPe being an exception, but
that isn’t a commonly used feature). Also, users can replace any device on the network or move
devices around and they continue to work. Default security parameters for MiNT are such that
these scenarios continue to function as expected, with minimal user intervention required only
when a new network is deployed.
The profile database on the RADIUS server consists of user profiles for each connected Network
Access Server (NAS) port. Each profile is matched to a username representing a physical port.
When users are authorized, it queries the user profile database using a username representative
of the physical NAS port making the connection.
To set or override an advanced configuration:
Select Devices from the Configuration menu.
Select Device Overrides to expand its menu items
Select a target device from the device browser in the lower, left-hand, side of the UI.
Select Advanced to expand its sub menu items.
Select Client Load Balancing.