3com 3CRWX120695A WXR100 用户手册

下载
页码 516
314
C
HAPTER
 8: C
ONFIGURING
 A
UTHENTICATION
, A
UTHORIZATION
AND
 A
CCOUNTING
 P
ARAMETERS
Creating a Web AAA
Network Access Rule
To create a Web AAA network access rule:
Access the Create MAC Network Access wizard:
Select the Configuration tool bar option.
In the Organizer panel, click the plus sign next to the WX switch. 
Click the plus sign next to AAA.
Select MAC Access Rules.
In the Task List panel, select MAC Network Access.
Specify whether the rule is for wireless access to an SSID or access 
through a wired authentication port:
„
If the rule is for access to an SSID, do one of the following:
„
To match on any SSID name, leave the value any in the SSID box.
„
To match only on a specific SSID name, select or type the name in 
the SSID box.
„
If the rule is for access through a wired authentication port, select 
Wired.
CAUTION: The default SSID name any matches on all SSID names. If the 
SSID box contains any and you do not change the SSID name, the 
authentication rule allows clients who match the userglob to access any 
SSID.
Type the userglob that is allowed to use Web AAA to access the SSID or 
wired authentication port.
A user glob is a string containing wildcards that matches on one or more 
user names. Type a full or partial username to be matched during 
authentication (1 to 80 alphanumeric characters, with no spaces or tabs). 
The format of a user glob depends on the client type and EAP method. 
For Windows domain clients using Protected EAP (PEAP), the user glob is 
in the format Windows_domain_name\username. The Windows domain 
name is the NetBIOS domain name and must be specified in capital 
letters. For example, EXAMPLE\sydney, or EXAMPLE\*.*, which specifies 
all usernames whose usernames contain periods.