Configuring Web Portal Webaaa - 3Com WX1200 3CRWX120695A Configuration Manual

Configuring Web
Portal WebAAA
1 Configure an SSID or wired authentication port and set the fallthru
2 Configure individual WebAAA users. Because the VLAN is assigned based
3 Configure web authentication rules for the WebAAA users.
4 Save the configuration changes.
1 Configure the user VLAN on ports 2 and 3, and configure an IP interface
2 Configure the service profile for SSID mycorp. Configuration includes the
To configure Web Portal WebAAA:
authentication type to web-portal. The default for SSIDs and for wired
authentication ports is none.
on the service profile (where it is set by the attr vlan-name vlan-id
option) or web-portal-wired user (where it is set to default), MSS
ignores the VLAN-Name and Tunnel-Private-Group-ID attributes.
However, MSS does assign other attributes if set.
Web Portal WebAAA Configuration Example
This example configures Web-Portal access to SSID mycorp.
on the VLAN:
WX1200# set vlan mycorp-vlan port 2-3
success: change accepted.
WX1200# set interface mycorp-vlan ip 192.168.12.10
255.255.255.0
success: change accepted.
The VLAN does not need to be configured on the switch where you
configure Web Portal but the VLAN does need to be configured on a
switch somewhere in the Mobility Domain. The user's traffic will be
tunneled to the switch where the VLAN is configured.
following:
Set the SSID name.
Change the fallthru authentication type to web-portal.
Set the default VLAN to mycorp-vlan (created in step 1.) MSS will
place Web-Portal users into this VLAN.
Enable RSN (WPA2) data encryption with CCMP. (This example
assumes clients support this encryption type.) TKIP is enabled by
default and is left enabled in this example.
WX1200# set service-profile mycorp-srvcprof ssid-name mycorp
success: change accepted.

Configuring Web Portal WebAAA

467