set location policy 203

The fallthru method is web. (For a wireless authentication rule, the fallthru method is specified by the set service-profileauth-fallthrucommand. For a wired authentication rule, the fallthru method is specified by the auth-fall-thruoption of the set port type wired-authcommand.)

Examples — The following command configures a WebAAA rule in the local WX database for SSID ourcorp and userglob rnd*:

WX4400# set authentication web ssid ourcorp rnd* local success: change accepted.

See Also

„clear authentication web on page 170

„display aaa on page 180

„set authentication admin on page 189

„set authentication console on page 191

„set authentication dot1x on page 193

„set authentication last-resorton page 197

set location policy Creates and enables a location policy on an WX switch. The location policy enables you to locally set or change authorization attributes for a user afer the user is authorized by AAA, without making changes to the AAA server.

Syntax set location policy deny if {ssid operator ssid-namevlan operator vlan-globuser operator user-globport port-listdap dap-num}[before rule-numbermodify rule-number]

Syntax set location policy permit

{vlan vlan-name inacl inacl-name outacl outacl-name}

if {ssid operator ssid-name vlan operator vlan-glob user operator user-glob port port-list dap dap-num} [before rule-number modify rule-number]

„deny — Denies access to the network to users with characteristics that match the location policy rule.

Page 203
Image 203
3Com 3CRWX120695A, 3CRWX440095A manual Set location policy