Network User Configuration Scenarios; General Use Of Network User Commands - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

Network User Configuration Scenarios

The following scenarios provide examples of ways in which you use AAA commands to configure
access for users:

General Use of Network User Commands

The following example illustrates how to configure IEEE 802.1X network users for authentication,
accounting, ACL filtering, and Mobility Profile assignment:
1. Configure all 802.1X users of SSID mycorp at EXAMPLE to be authenticated by server
group shorebirds. Type the following command:
DWS-1008# set authentication dot1x ssid mycorp EXAMPLE\* pass-through
shorebirds
2. Configure stop-only accounting for all mycorp users at EXAMPLE, for accounting records
to be stored locally. Type the following command:
DWS-1008# set accounting dot1x ssid mycorp EXAMPLE\* stop-only local
success: change accepted.
3. Configure an ACL to filter the inbound packets for each user at EXAMPLE. Type the
following command for each user:
DWS-1008# set user EXAMPLE\username attr filter-id acl-101.in
This command applies the access list named acl-101 to each user at EXAMPLE.
4. To display the ACL, type the following command:
DWS-1008# show security acl info acl-101
set security acl ip acl-101 (hits #0 0)
----------------------------------------------------
1. permit IP source IP 192.168.1.1 0.0.0.255 destination IP any enable-hits
5. Create a Mobility Profile called tulip by typing the following commands:
DWS-1008# set mobility-profile name tulip port 2,4-6
success: change accepted.
DWS-1008# set mobility-profile mode enable
success: change accepted.
DWS-1008# show mobility-profile
Mobility Profiles
Name Ports
=========================
tulip
AP 2
AP 3
AP 4
AP 6
D-Link DWS-1008 User Manual