3com WX1200 Note De Mise

If a user attempts to log in to the network on a Web 
AAA login page served by the WX switch, but fails 
authorization, the user does not receive a message 
indicating that they have been denied access.

The display config command lists CLI commands 
only for configuration settings that differ from the 
default settings. However, the command lists the set 
web-auth enable command when Web AAA is 
enabled, even though Web AAA is enabled by 
default. Normally, commands for default settings are 
displayed only by the display config all command. 
This issue is cosmetic only.

When configuring an access control entry (ACE), if 
the name you specify for the ACE begins with a word 
that is also a keyword used by the CLI, the CLI rejects 
the ACE name. In the following examples, the ACE 
names that begin with port and vlan are rejected, but 
the ACE name that starts with abc, which is not a CLI 
keyword, is accepted:

WX1200# set security acl ip port_abc deny 
0.0.0.0 255.255.255.255

error: Wrong ACL name input = port_abc

WX1200# set security acl ip vlan_abc deny 
0.0.0.0 255.255.255.255

error: Wrong ACL name input = vlan_abc

WX1200# set security acl ip abc_port deny 
0.0.0.0 255.255.255.255

Do not use a CLI keyword in the beginning of an ACE 
name.

If an ACL with the hit-sample-rate option enabled is 
mapped only to a user (and not to a port or VLAN, 
and so on), MSS does not display hit information for 
the ACL. This issues does not affect ACLs that are 
mapped to anything besides users. This issue also 
does not affect the operation of the ACL. MSS cor-
rectly applies the ACL even if the hit data is not dis-
played.

When you type the crypto certificate admin or 
crypto certificate eap command, the CLI incorrectly 
echoes only a carriage return instead of echoing a 
carriage return and line feed. This causes the cursor to 
appear under the end of the previous row of output 
instead of in the first column on the left.