3Com WX4400 Reference Manual page 191

f To configure accounting, select Enabled, select the record type
(Start-Stop or Stop-Only), then select LOCAL or a RADIUS server group
for the accounting and click Add.
g Click Finish.
If you selected None in step 2, you are finished with this
procedure.
If you selected Web Portal in step 2, go to step 7.
If you selected Open Access in step 2, go to step 11.
7 If you selected Web Portal in step 2, select the VLAN to which you want
the switch to assign Web Portal users. Otherwise, go to step 11.
8 Click Next.
The ACEs (ACL rules) that 3WXM will configure for the Web-Portal
service are listed. The ACEs are required to allow DHCP traffic while
blocking all other traffic while a user is being authenticated. These ACEs
are used only during authentication. After the user is authenticated, the
ACEs are not used.
If you need to add ACEs, continue with this step. Otherwise, go to step 9.
To add an ACE, click Add Rule. 3WXM adds an ACE to the end of the
list. The ACE matches on all source and destination IP addresses and
denies them.
To modify an ACE, select the part of the ACE you want to modify, and
edit or select the new value. (For information about ACE settings, see
"Viewing and Configuring ACLs" on page 230.)
CAUTION: Do not change the deny rule at the bottom of the ACL. This
rule must be present and the capture option must be used with the rule.
If the rule does not have the capture option, the Web Portal user never
receives a login page.
9 Click Next.
10 Create a Web Portal authentication rule to control access to the port, or
use one that has already been created.
To create a new rule:
a Click Create.
b Specify the user glob in the Matching User Glob box. To match on all
usernames, leave the wildcards (**) in the box. (For syntax
information, see "Access Rules" on page 248.)
Viewing and Changing Port Settings 191