3Com WX4400 3CRWX440095A WX1200 manual Viewing and Configuring Last-Resort Network Access Rules

Viewing and Configuring Last-Resort Network Access Rules 317

2Specify whether the rule is for wireless access to an SSID or access through a wired authentication port:

„If the rule is for access to an SSID, do one of the following:

„To match on any SSID name, leave the value any in the SSID box.

„To match only on a specific SSID name, select or type the name in the SSID box.

„If the rule is for access through a wired authentication port, select Wired.

CAUTION: The default SSID name any matches on all SSID names. If the SSID box contains any and you do not change the SSID name, the authentication rule allows clients who match the userglob to access any SSID.

3Click Next.

4If the authentication rule is disabled, select Enabled.

When a rule is disabled, 3WXM does not add it to the switch’s configuration.

5Select the authentication method(s) in the Available RADIUS Server Groups list and click Add.

An authentication method specifies where the switch will look for user information to authenticate users. You can select a RADIUS server group, LOCAL (the switch’s local user database), or both.

MSS tries the methods in the order they appear in the Current RADIUS Server Groups list. To reorder the methods, select a method and click Up or Down.

„If you specify a RADIUS server group as the first method and a user is denied access by the RADIUS server, no authentication and authorization are attempted with the other methods specified in the list.

„If you specify LOCAL as the first method and a user is not in the local user database on the WX, authentication and authorization are attempted with a RADIUS server group if one is defined in the method list.

The authentication methods you select are also used for authorization.

6Click Next.