3Com WX1200 Reference Manual page 184

184 C 6: C
HAPTER ONFIGURING
WX S P
YSTEM ARAMETERS
To use an existing rule, leave the rule in the list.
c Click Next.
d Select the authentication and accounting method (RADUS server
group or local database).
(For information, see "AAA Methods (RADIUS Server Groups and the
Local User Database)" on page 242.)
e Click Next.
f To configure accounting, select Enabled, select the record type
(Start-Stop or Stop-Only), then select LOCAL or a RADIUS server group
for the accounting and click Add.
g Click Finish.
If you selected None in step 2, you are finished with this
procedure.
If you selected Web Portal in step 2, go to step 7.
If you selected Open Access in step 2, go to step 11.
7 If you selected Web Portal in step 2, select the VLAN to which you want
the switch to assign Web Portal users. Otherwise, go to step 11.
8 Click Next.
The ACEs (ACL rules) that 3WXM will configure for the Web-Portal
service are listed. The ACEs are required to allow DHCP traffic while
blocking all other traffic while a user is being authenticated. These ACEs
are used only during authentication. After the user is authenticated, the
ACEs are not used.
If you need to add ACEs, continue with this step. Otherwise, go to step 9.
To add an ACE, click Add Rule. 3WXM adds an ACE to the end of the
list. The ACE matches on all source and destination IP addresses and
denies them.
To modify an ACE, select the part of the ACE you want to modify, and
edit or select the new value. (For information about ACE settings, see
"Viewing and Configuring ACLs" on page 222.)
CAUTION: Do not change the deny rule at the bottom of the ACL. This
rule must be present and the capture option must be used with the rule.
If the rule does not have the capture option, the Web Portal user never
receives a login page.
9 Click Next.