Webaaa Requirements And Recommendations - 3Com 3CRWX120695A, 3CRWX440095A Configuration Manual

304 C 13: C
HAPTER ONFIGURING
WebAAA
Requirements and
Recommendations
AAA N U
FOR ETWORK SERS
Use the following information to ensure operation of the Web AAA
feature.
WX Switch Requirements
Install a WebAAA certificate. You can install a certificate signed by a
trusted third-party certificate authority (CA), or one signed by the WX
switch itself. (For information, see the Wireless LAN Switch and
Controller Installation and Basic Configuration Guide or Chapter 12,
"Managing Keys and Certificates," on page 255.)
If you choose to install a self-signed WebAAA certificate, use a
common name (a required field in the certificate), that resembles a
web address and contains at least one dot. When MSS serves the
login page to the browser, the page's URL is based on the common
name in the WebAAA certificate.
Here are some examples of common names in the recommended
format:
webaaa.login
webaaa.customername.com
webaaa.local
Here are some examples of common names that are not in the
recommended format:
webaaa
3Com_webaaa
web
DNS must be configured. Configure the primary DNS server, and
secondary servers if applicable (set ip dns server command). Also
configure the default domain name (set ip dns domain command),
and enable DNS (set ip dns enable command). By default, DNS is
disabled and none of its parameters are configured.
The fallthru authentication type for the SSID or wired authentication
port on which the user will access the network, must be web-auth.
The fallthru authentication type is web-auth by default for SSIDs but
not for wired authentication ports. (To set the fallthru authentication
type for an SSID, set it in the service profile for the SSID, using the set
service-profile auth-fallthru command. To set it on a wired
authentication port, use the auth-fall-thru web-auth parameter of
the set port type wired-auth command.)