D-Link DWS-1008, Справочное руководство CLI

Страница: 198 / 531

D-Link DWS-1008 CLI Manual 1
set authentication web
Configures an authentication rule to allow a user to log in to the network using a web page served
by the switch. The rule can be activated if the user is not otherwise granted or denied access by
802.1X, or granted access by MAC authentication.
Syntax: set authentication web {ssid
ssid-name
| wired}
user-glob method1
[
method2
]
[ method3 ] [ method4 ]
user-glob A single user or a set of users.
Specify a username, use the double-asterisk wildcard character (**) to specify
all usernames, or use the single-asterisk wildcard character (*) to specify a
set of usernames up to or following the first delimiter character—either an at
sign (@) or a period (.).
ssid
ssid-name SSID name to which this authentication rule applies. To apply the rule to all
SSIDs, type any.
wired Applies this authentication rule specifically to users connected to a wired
authentication port.
method1-4 At least one and up to four methods that MSS uses to handle authentication.
Specify one or more of the following methods in priority order. MSS applies
multiple methods in the order you enter them. A method can be one of the
following:
•
local—Uses the local database of usernames and user groups on the
switch for authentication.
•
server-group-name—Uses the defined group of RADIUS servers for
authentication. You can enter up to four names of existing RADIUS
server groups as methods. RADIUS servers cannot be used with the
EAP-TLS protocol. For more information, see “Usage.”
Defaults: By default, authentication is unconfigured for all clients with network access through
AP ports or wired authentication ports on the switch. Connection, authorization, and accounting
are also disabled for these users. Access Enabled.