Dell PowerConnect W-Airwave Configuration Manual page 150

Table 73
Field
Other Settings
Fail Through
Add New Server
Server Group Rule
Field to set
Attribute
Operation
Operand
Role/VLAN
Select Add to complete the configuration of the Server Group, or click Save to complete the editing of an existing
server. The new server group appears on the Security > Server Groups page.
144 | Configuration Reference
Security > Server Groups > Add or Edit Server Group Fields and Descriptions (Continued)
Default
No
role
ARAP-
Features
contains
ap-role
Description
Enable or disable a fail through server.
When fail-through authentication is enabled, users that fail authentication on the first
server in the server list should be authenticated with the second server. Thecontroller
attempts authentication with each server in the list until either there is a successful
authentication or the list of servers in the group is exhausted.
This feature is useful in environments where there are multiple, independent
authentication servers; users may fail authentication on one server but can be
authenticated on another server.
Select this button to add a new server to the Server Group being configured.
A new Server section and Server Group Server Rules section appear with the
following settings to be defined:
Server Section
Trim FQDN—Default setting is No. Change to Yes to enable.

You can use the "match FQDN" option for a server match rule. With a match FQDN
rule, the server is selected if the <domain> portion of the user information in the
formats <domain>\<user> or <user>@<domain> exactly matches a specified
string. This rule does not support client information in the host/<pc-
name>.<domain> format, so it is not useful for 802.1x machine authentication. The
match FQDN option performs matches on only the <domain> portion of the user
information sent in an authentication request. The match-authstring option
(described previously) allows you to match all or a portion of the user information
sent in an authentication request.
Server Type—Select the server type for the new server being added. Options are

RADIUS (default), LDAP, TACACS, Internal, or Windows.
Server—Select the server from the drop-down menu that the new server is to

use. You can edit an existing server or create a new server.
Server Group Server Rules Section
Select the Add button to add a new rules section. The page that appears contains the
following settings to define:
Match Type—From the drop-down menu, select Authstring or FQDN. The

following settings complete the configuration.
Operator—For Authstring only, specify how to process the string (contains,

equals, starts with).
Match String—Enter the string or string fragment.

Finish by clicking the Add New Server Group Server Rules button.
Specify whether the server group rule is a role or a VLAN. The Role/VLAN field at the
bottom of the page changes in response to your selection here.
From the drop-down menu, click the attribute that defines the server group rule being
configured. Many options are supported.
Select the criteria by which to process the Operand, which you specify in the
following field.
Enter a text string.
Select the role or VLAN to associate with this new server group rule from the drop-
down menu.
Dell PowerConnect W-AirWave 7.5 | Configuration Guide