Viewing Users And Groups In The Local Database; Creating A Named User - Nortel 2350 Reference Manual

278 Configuring Authentication, Authorization, and Accounting Parameters
You can create two types of users in the local database:
• Named users—These users are authenticated by username and password and are assigned to specific VLANs. Users
include administrators and network users. You can group these users by creating user groups, in order to simplify
configuration.
• MAC address users—These users are authenticated by a MAC address. For example, devices such as PDAs or
cellular phones that do not support 802.1X authentication are identified when the WSS discovers the MAC
addresses of these devices from received frames. The MAC address is the username and is authenticated by the
local database. You can group these users by creating user groups. MAC address users and user groups cannot be
assigned administrative access to the WSS.
In addition to username and password, you can configure authorization attributes for users. Authorization attributes
specify the network resources the user can access. The most commonly used attribute is VLAN-Name, which specifies
the VLAN to place the user in after they are authorized.
You can configure authorization attributes for individual users and for user groups. When you configure attributes for a
user group, the attribute settings apply to all users in the group. However, if attributes are also configured for an indi-
vidual user in the group, the values for the attributes configured for the individual user override the attribute values
configured for the group.
You can configure groups for named users and groups for MAC users. A group cannot contain both named users and
MAC users.

Viewing Users and Groups in the Local Database

1
Select the Configuration tool bar option.
2
In the Organizer panel, click the plus sign next to the WSS.
3
Click the plus sign next to AAA.
4
Select Local User Database.
The users and user groups configured in the local user database appear.

Creating a Named User

1
Access the Create Named User wizard:
a
Select the Configuration tool bar option.
b
In the Organizer panel, click the plus sign next to the WSS.
c
Click the plus sign next to AAA.
d Select Local User Database.
e In the Task List panel, select Create User.
2 In the Name box, type the name of the user (1 to 60 alphanumeric characters, with no spaces or tabs).
3 In the Password box, type the password for the user (1 to 80 alphanumeric characters, with no spaces or
tabs). You must specify a password if you want the password to be encrypted in the configuration file.
4 In the User Group list, select a user group to assign the user to, if the group is already configured.
You do not need to assign a user to a user group. If you do select a user group, you only need to specify a
password for the user. All other attributes are obtained from the user group.
NN47250-102 (320666-G Version 02.01)