3Com WX1200 Reference Manual page 251

16 Click Next.
The ACEs (ACL rules) that 3WXM will configure for the Web-Portal
service are listed. The ACEs are required to allow DHCP traffic while
blocking all other traffic while a user is being authenticated. These ACEs
are used only during authentication. After the user is authenticated, the
ACEs are not used.
If you need to add ACEs, use the following procedure. Otherwise, go to
step 17.
a Click Next.
b To add an ACE, click Add Rule. 3WXM adds an ACE to the end of the
list. The ACE matches on all source and destination IP addresses and
denies them.
To modify an ACE, select the part of the ACE you want to modify, and
edit or select the new value. (For information about ACE settings, see
"Viewing and Configuring ACLs" on page 222.)
CAUTION: Do not change the deny rule at the bottom of the ACL. This
rule must be present and the capture option must be used with the rule.
If the rule does not have the capture option, the Web Portal user never
receives a login page.
17 Click Next.
18 Specify the authentication method (RADIUS server group or local
database).
(For information, see "AAA Methods (RADIUS Server Groups and the
Local User Database)" on page 242.)
If you selected LOCAL as an authentication method, go to step 19.
Otherwise, go to step 21.
19 Click Next.
The users in the switch's local database are listed. For convenience, you
can add, modify, or delete users on this page. To add a user, click Create
and see "Creating a Named User" on page 291. To modify a user, select
the user and click Properties. To delete a user, select the user and click
Delete.
3WXM automatically creates a user named web-portal-ssid, where ssid is
the SSID name. This username is used temporarily for users while they are
being authenticated. Do not delete or modify this user.
Viewing and Configuring Wireless Services 251