Set Authentication Web - 3Com WX4400 Command Reference Manual

246 C 8: AAA C
HAPTER
set authentication
web
OMMANDS
Configures an authentication rule to allow a user to log in to the network
using a web page served by the WX switch. The rule can be activated if
the user is not otherwise granted or denied access by 802.1X, or granted
access by MAC authentication.
Syntax —
set authentication web {ssid ssid-name | wired}
user-glob method1 [method2] [method3] [method4]
— A single user or a set of users.
user-glob
Specify a username, use the double-asterisk wildcard character (**) to
specify all usernames, or use the single-asterisk wildcard character (*)
to specify a set of usernames up to or following the first delimiter
character—either an at sign (@) or a period (.). (For details, see "User
Globs" on page 28.)
ssid ssid-name
applies. To apply the rule to all SSIDs, type any.
wired — Applies this authentication rule specifically to users
connected to a wired authentication port.
method1 , method2, method3, method4
methods that MSS uses to handle authentication. Specify one or more
of the following methods in priority order. MSS applies multiple
methods in the order you enter them.
A method can be one of the following:
local — Uses the local database of usernames and user groups on
the WX switch for authentication.
server-group-name
for authentication. You can enter up to four names of existing
RADIUS server groups as methods.
RADIUS servers cannot be used with the EAP-TLS protocol.
For more information, see "Usage."
Defaults — By default, authentication is unconfigured for all clients with
network access through MAP ports or wired authentication ports on the
WX switch. Connection, authorization, and accounting are also disabled
for these users.
Access — Enabled.
History —Introduced in MSS Version 3.0.
— SSID name to which this authentication rule
— Uses the defined group of RADIUS servers
— At least one and up to four