3Com 3CRWX120695A, Installation And Basic Configuration Manual

Page: 81 / 108

Configuring User Authentication 81
examples. Alternatively, use a double asterisk (**) with no delimiters to
match all usernames.
If you have more than one authentication rule, add the rules in the order
you want MSS to use them. For example, add the most specific rules first
and the most general rules (rules that match most widely) last.
Authentication Example for Users in a Windows Domain The
following command configures an authentication rule for a set of users,
known as a user glob, in a Microsoft Windows domain. The command
configures all users in the EXAMPLE Windows domain to use any
supported EAP type to communicate with EAP-capable RADIUS server
group
grp1 , when attempting to access SSID private_wlan . The server
group authenticates the users.
WX1200# set authentication dot1x ssid private_wlan EXAMPLE\* pass-through grp1
success: change accepted.
Authentication Example for Users in a UNIX Domain The
following commands add authentication rules for user globs in a UNIX
domain. Users are authenticated by using any supported EAP type to
communicate with EAP-capable RADIUS server group
grp1 .
WX1200# set authentication dot1x ssid private_wlan *@mktg.example.com
pass-through grp1
success: change accepted.
WX1200# set authentication dot1x ssid private_wlan *@eng.example.com
pass-through grp1
success: change accepted.
WX1200# set authentication dot1x ssid private_wlan *@*.*.com pass-through grp1
success: change accepted.
WX1200# set authentication dot1x ssid private_wlan *@*.com pass-through grp1
success: change accepted.
Displaying the Server Group and Authentication Configuration
The display aaa command displays the server group and authentication
configuration on a WX switch. In the following example, the
configuration contains a server group with two RADIUS servers and an
authentication rule for users in a Windows domain.