About AAA for Network Users 435

„SSID—If 802.1X or MAC authentication do not apply to the SSID (no 802.1X or MAC access rules are configured for the SSID), the default authorization attributes set on the SSID are applied to the user and the user is allowed onto the network.

„Wired authentication port—If 802.1X or MAC authentication do not apply to the port (no 802.1X or MAC access rules have the wired option set), MSS checks for user last-resort-wired. If this user is configured, the authorization attributes set for the user are applied to the user who is on the wired authentication port and the user is allowed onto the network.

Authentication Algorithm

MSS can try more than one of the authentication types described in “Authentication Types” to authenticate a user. MSS tries 802.1X first. If the user NIC supports 802.1X but fails authentication, MSS denies access. Otherwise, MSS tries MAC authentication next. If MAC authentication is successful, MSS grants access to the user. Otherwise, MSS tries the fallthru authentication type specified for the SSID or wired authentication port. The fallthru authentication type can be one of the following:

„Web

„Last-resort

„None

Web and last-resort are described in “Authentication Types”. None means the user is automatically denied access. The fallthru authentication type for wireless access is associated with the SSID (through a service profile). The fallthru authentication type for wired authentication access is specified with the wired authentication port. (For information about service profiles, see “Service Profiles” on page 202. For information about wired authentication port configuration, see “Setting a Port for a Wired Authentication User” on page 75.)

The fallthru authentication type None is different from the authentication method none you can specify for administrative access. The fallthru authentication type None denies access to a network user. In contrast, the authentication method none allows access to the WX switch by an administrator. (See “Configuring AAA for Administrative and Local Access” on page 51.)

Figure 30 shows how MSS tries the authentication types. (The authentication process is similar for access through a wired authentication port, except last-resort access requires a last-resort-wired user.)

Page 434 Page 436
Page 435
Image 435
3Com WX2200 3CRWX220095A, WXR100 3CRWXR10095A, WX4400 3CRWX440095A Authentication Algorithm, „ Web „ Last-resort „ None
Page 434 Page 436

WX1200 3CRWX120695A, WX4400 3CRWX440095A, WXR100 3CRWXR10095A, WX2200 3CRWX220095A specifications

The 3Com WX2200 (3CRWX220095A), WX4400 (3CRWX440095A), WX1200 (3CRWX120695A), and WXR100 (3CRWXR10095A) are part of a robust suite of wireless networking solutions offered by 3Com, designed to meet the needs of modern enterprise environments. These devices provide reliable connectivity, flexibility, and scalability, making them ideal for businesses of all sizes.

The 3Com WX2200 is a high-performance wireless switch that supports up to 64 access points, making it suitable for medium to large deployments. It boasts advanced features such as dynamic RF management, which optimizes channel selection and power levels based on real-time network conditions. This ensures maximum coverage and minimizes interference, leading to improved user experiences. Additionally, it supports dual-band operation and can seamlessly integrate with various wireless access points, providing enhanced throughput and robust performance.

The WX4400 is designed for high-density environments and offers extensive scalability. It supports up to 128 access points and is equipped with advanced security features, including WPA2 enterprise encryption and role-based access control. This switch also features intelligent load balancing, allowing it to dynamically distribute user traffic across available access points, thus enhancing overall network efficiency.

The WX1200, positioned as an entry-level solution, is well-suited for small to medium-sized businesses. It offers a user-friendly management interface, allowing IT staff to quickly configure and monitor the network. This device supports a variety of deployment scenarios and can be easily integrated into existing infrastructure. It also comes equipped with essential security features to protect the network from unauthorized access.

The WXR100 complements the series by providing simplified management for access points, ensuring that businesses can easily deploy and maintain their wireless networks. It supports various management protocols and integrates with a variety of third-party systems, enhancing inter-operability. With Power over Ethernet (PoE) support, the WXR100 can deliver power to connected access points, reducing the complexity and costs associated with additional power infrastructure.

Together, these solutions embody 3Com's commitment to delivering high-quality networking products that enhance connectivity and performance. With features such as scalability, advanced security, dynamic load balancing, and centralized management, the WX2200, WX4400, WX1200, and WXR100 form a comprehensive wireless networking ecosystem tailored for today’s enterprise challenges.
Top Page Image Contents