3Com 3CRWX120695A, Reference Manual

Page: 331 / 570

Configuring and Managing Access Rules for Network Users 331
mode of the MSS CLI, or administrative access to the nonenabled
mode of the CLI.
■
Session-Timeout — Maximum number of seconds allowed for the
user’s session.
Regardless of whether you configure the user and attributes on RADIUS
servers or the WX switch’s local database, the VLAN attribute is required.
The other attributes are optional.
Accounting MSS also supports accounting. Accounting collects and sends
information used for billing, auditing, and reporting — for example, user
identities, connection start and stop times, the number of packets
received and sent, and the number of bytes transferred. You can track
sessions through accounting information stored locally or on a remote
RADIUS server. As network users roam throughout a Mobility Domain,
accounting records track them and their network usage.
Configuring
Authentication
You can configure authentication rules and settings.
To configure authentication rules
1 Do one of the following:
■
From the AAA page of the WX Switch wizard, select Network Access.
■
From the Create SSID wizard, click Network Access .
2 Click New , and select an authentication type from the list, to configure
an authentication rule for accessing the SSID.
You can configure more than one type of authentication rule for the
same SSID. A WX switch attempts them in the following order:
■
802.1X Network Access — If the client name matches the userglob,
WX switch attempts to authenticate the client using 802.1X. If the
usergob does not match or the client does not support 802.1X, the
switch next tries MAC authentication.
■
MAC Network Access — WX switch attempts to authenticate the
client using MAC authentication. If the client’s MAC address does not
match the MAC address glob, the WX switch tries last-resort
authentication.
■
Last Resort Network Access — If the client name matches the
userglob, the WX switch allows the user onto the SSID. If the client
name does not match the userglob, the WX switch tries Web AAA.