3Com WX4400 3CRWX440095A WX1200, 3CRWXR10095A manual Configuring WX System Parameters

182CHAPTER 6: CONFIGURING WX SYSTEM PARAMETERS

To use an existing rule, leave the rule in the list.

cClick Next.

dSelect the authentication and accounting method (RADUS server group or local database).

(For information, see “AAA Methods (RADIUS Server Groups and the Local User Database)” on page 240.)

eClick Next.

fTo configure accounting, select Enabled, select the record type (Start-Stop or Stop-Only), then select LOCAL or a RADIUS server group for the accounting and click Add.

gClick Finish.

„If you selected None in step 2, you are finished with this procedure.

„If you selected Web Portal in step 2, go to step 7.

„If you selected Open Access in step 2, go to step 11.

7If you selected Web Portal in step 2, select the VLAN to which you want the switch to assign Web Portal users. Otherwise, go to step 11.

8Click Next.

The ACEs (ACL rules) that 3WXM will configure for the Web-Portal service are listed. The ACEs are required to allow DHCP traffic while blocking all other traffic while a user is being authenticated. These ACEs are used only during authentication. After the user is authenticated, the ACEs are not used.

If you need to add ACEs, continue with this step. Otherwise, go to step 9.

„To add an ACE, click Add Rule. 3WXM adds an ACE to the end of the list. The ACE matches on all source and destination IP addresses and denies them.

„To modify an ACE, select the part of the ACE you want to modify, and edit or select the new value. (For information about ACE settings, see “Viewing and Configuring ACLs” on page 220.)

CAUTION: Do not change the deny rule at the bottom of the ACL. This rule must be present and the capture option must be used with the rule. If the rule does not have the capture option, the Web Portal user never receives a login page.

9Click Next.