Mapping Security ACLs 391

To map a security ACL to a user session, follow these steps:

1Create the security ACL. For example, to filter packets coming from 192.168.253.1 and going to 192.168.253.12, type the following:

WX1200# set security acl ip acl-222 permit

ip 192.168.253.1 0.0.0.0 198.168.253.12 0.0.0.0 hits

2Commit the security ACL to the running configuration. For example, to commit acl-222, type the following command:

WX1200# commit security acl acl-222 success: change accepted.

3Apply the Filter-Id authentication attribute to a user’s session via an external RADIUS server. For instructions, see the documentation for your RADIUS server.

If the Filter-Id value returned through the authentication and authorization process does not match the name of a committed security ACL in the WX, the user fails authorization and cannot be authenticated.

4Alternatively, authenticate the user with the Filter-Id attribute in the WX switch’s local database. Use one of the commands shown in Table 33. Specify .in for incoming packets or .out for outgoing packets.

Table 33 Mapping Commands

Mapping Target

Commands

 

User authenticated by set user username attr filter-id acl-name.in

a password

set user username attr filter-id acl-name.out

 

User authenticated by set mac-user username attr filter-id acl-name.in

a MAC address

set mac-user username attr filter-id acl-name.out

 

When assigned the Filter-Id attribute, an authenticated user with a current session receives packets based on the security ACL. For example, to restrict incoming packets for Natasha to those specified in acl-222, type the following command:

WX1200# set user Natasha attr filter-id acl-222.in success: change accepted.

You can also map a security ACL to a user group. For details, see “Assigning a Security ACL to a User or a Group” on page 494. For more information about authenticating and authorizing users, see “About Administrative Access” on page 54 and “AAA Tools for Network Users” on page 441.

Page 390 Page 392
Page 391
Image 391
3Com WX2200 3CRWX220095A, WXR100 3CRWXR10095A manual To map a security ACL to a user session, follow these steps
Page 390 Page 392

WX1200 3CRWX120695A, WX4400 3CRWX440095A, WXR100 3CRWXR10095A, WX2200 3CRWX220095A specifications

The 3Com WX2200 (3CRWX220095A), WX4400 (3CRWX440095A), WX1200 (3CRWX120695A), and WXR100 (3CRWXR10095A) are part of a robust suite of wireless networking solutions offered by 3Com, designed to meet the needs of modern enterprise environments. These devices provide reliable connectivity, flexibility, and scalability, making them ideal for businesses of all sizes.

The 3Com WX2200 is a high-performance wireless switch that supports up to 64 access points, making it suitable for medium to large deployments. It boasts advanced features such as dynamic RF management, which optimizes channel selection and power levels based on real-time network conditions. This ensures maximum coverage and minimizes interference, leading to improved user experiences. Additionally, it supports dual-band operation and can seamlessly integrate with various wireless access points, providing enhanced throughput and robust performance.

The WX4400 is designed for high-density environments and offers extensive scalability. It supports up to 128 access points and is equipped with advanced security features, including WPA2 enterprise encryption and role-based access control. This switch also features intelligent load balancing, allowing it to dynamically distribute user traffic across available access points, thus enhancing overall network efficiency.

The WX1200, positioned as an entry-level solution, is well-suited for small to medium-sized businesses. It offers a user-friendly management interface, allowing IT staff to quickly configure and monitor the network. This device supports a variety of deployment scenarios and can be easily integrated into existing infrastructure. It also comes equipped with essential security features to protect the network from unauthorized access.

The WXR100 complements the series by providing simplified management for access points, ensuring that businesses can easily deploy and maintain their wireless networks. It supports various management protocols and integrates with a variety of third-party systems, enhancing inter-operability. With Power over Ethernet (PoE) support, the WXR100 can deliver power to connected access points, reducing the complexity and costs associated with additional power infrastructure.

Together, these solutions embody 3Com's commitment to delivering high-quality networking products that enhance connectivity and performance. With features such as scalability, advanced security, dynamic load balancing, and centralized management, the WX2200, WX4400, WX1200, and WXR100 form a comprehensive wireless networking ecosystem tailored for today’s enterprise challenges.
Top Page Image Contents