3Com WX4400 Reference Manual page 325

2 Specify whether the rule is for wireless access to an SSID or access
through a wired authentication port:
If the rule is for access to an SSID, do one of the following:
To match on any SSID name, leave the value any in the SSID box.
To match only on a specific SSID name, select or type the name in
the SSID box.
If the rule is for access through a wired authentication port, select
Wired.
CAUTION: The default SSID name any matches on all SSID names. If the
SSID box contains any and you do not change the SSID name, the
authentication rule allows clients who match the MAC address glob to
access any SSID.
3 In the User Glob box, type a full or partial username to be matched
during authentication.
MAC addresses must be specified with colons as the delimiters (for
example, 00:11:22:33:44:55). You can use wildcards by specifying an
asterisk (*) in MAC addresses. The following lists examples of using
wildcards in MAC addresses:
* (all MAC addresses)
00:*
00:01:*
00:01:02*
00:01:02:03:*
00:01:02:03:04:*
00:01:02:03:04:0*
4 Click Next.
5 If the authentication rule is disabled, select Enabled.
When a rule is disabled, 3WXM does not add it to the configuration.
6 Select the authentication method(s) in the Available RADIUS Server
Groups list and click Add.
An authentication method specifies where the switch will look for user
information to authenticate users. You can select a RADIUS server group,
LOCAL (the local user database for the switch), or both.
Viewing and Configuring MAC Network Access Rules 325