D-Link DWS-1008 User Manual page 53

DWS-1008 User's Manual
Authentication Example for Users in a UNIX Domain
The following commands add authentication rules for user globs in a UNIX domain. Users are
authenticated by using any supported EAP type to communicate with EAP-capable RADIUS
server group grp1.
DWS-1008# set authentication dot1x ssid private_wlan *@mktg.example.com
pass-through grp1
success: change accepted.
DWS-1008# set authentication dot1x ssid private_wlan *@eng.example.com
pass-through grp1
success: change accepted.
DWS-1008# set authentication dot1x ssid private_wlan *@*.*.com pass-through grp1
success: change accepted.
DWS-1008# set authentication dot1x ssid private_wlan *@*.com pass-through grp1
success: change accepted.
Displaying the Server Group and Authentication Configuration
The show aaa command displays the server group and authentication configuration on a
switch. In the following example, the configuration contains a server group with two RADIUS
servers and an authentication rule for users in a Windows domain.
DWS-1008# show aaa
Default Values
authport=1812 acctport=1813 timeout=5 acct-timeout=5 retrans=3 deadtime=0 key=(null)
author-pass=(null)
Radius Servers
Server Addr
--------------------------------------------------------------------------------
svr1 10.10.70.20 1812 1813
svr2 10.10.70.40 1812 1813
Server groups
grp1 (load-balanced): svr1 svr2
set authentication dot1x ssid private_wlan EXAMPLE\* pass-through grp1
D-Link Systems, Inc.
Configuration (continued)
Ports T/o
5
5
Tries Dead State
3 0 UP
3 0 UP
Configuration
48