3Com 3CRWXR10095A, 3CRWX120695A WXR100 manual Viewing and Configuring Wireless Services

Viewing and Configuring Wireless Services 249

16Click Next.

The ACEs (ACL rules) that 3WXM will configure for the Web-Portal service are listed. The ACEs are required to allow DHCP traffic while blocking all other traffic while a user is being authenticated. These ACEs are used only during authentication. After the user is authenticated, the ACEs are not used.

If you need to add ACEs, use the following procedure. Otherwise, go to step 17.

a Click Next.

b To add an ACE, click Add Rule. 3WXM adds an ACE to the end of the list. The ACE matches on all source and destination IP addresses and denies them.

To modify an ACE, select the part of the ACE you want to modify, and edit or select the new value. (For information about ACE settings, see “Viewing and Configuring ACLs” on page 220.)

CAUTION: Do not change the deny rule at the bottom of the ACL. This rule must be present and the capture option must be used with the rule. If the rule does not have the capture option, the Web Portal user never receives a login page.

17Click Next.

18Specify the authentication method (RADIUS server group or local database).

(For information, see “AAA Methods (RADIUS Server Groups and the Local User Database)” on page 240.)

If you selected LOCAL as an authentication method, go to step 19. Otherwise, go to step 21.

19Click Next.

The users in the switch’s local database are listed. For convenience, you can add, modify, or delete users on this page. To add a user, click Create and see “Creating a Named User” on page 289. To modify a user, select the user and click Properties. To delete a user, select the user and click Delete.

3WXM automatically creates a user named web-portal-ssid, where ssid is the SSID name. This username is used temporarily for users while they are being authenticated. Do not delete or modify this user.