48
DWS-1008 User’s Manual
D-Link Systems, Inc.
Configuration (continued)
Configuration
Authentication Example for Users in a UNIX Domain
The following commands add authentication rules for user globs in a UNIX domain. Users are
authenticated by using any supported EAP type to communicate with EAP-capable RADIUS
server group grp1.
DWS-1008#
set authentication dot1x ssid private_wlan *@mktg.example.com
pass-through grp1
success: change accepted.
DWS-1008#
set authentication dot1x ssid private_wlan *@eng.example.com
pass-through grp1
success: change accepted.
DWS-1008#
set authentication dot1x ssid private_wlan *@*.*.com pass-through grp1
success: change accepted.
DWS-1008#
set authentication dot1x ssid private_wlan *@*.com pass-through grp1
success: change accepted.
Displaying the Server Group and Authentication Configuration
The show aaa command displays the server group and authentication configuration on a
switch. In the following example, the configuration contains a server group with two RADIUS
servers and an authentication rule for users in a Windows domain.
DWS-1008#
show aaa
Default Values
authport=1812 acctport=1813 timeout=5 acct-timeout=5 retrans=3 deadtime=0 key=(null)
author-pass=(null)
Radius Servers
Server Addr
Ports
T/o Tries Dead State
--------------------------------------------------------------------------------
svr1 10.10.70.20 1812 1813 5
3
0 UP
svr2 10.10.70.40 1812 1813 5
3
0 UP
Server groups
grp1 (load-balanced): svr1 svr2
set authentication dot1x ssid private_wlan EXAMPLE\* pass-through grp1