442CHAPTER 21: CONFIGURING AAA FOR NETWORK USERS

“Globs” and Groups “Globbing” lets you classify users by username or MAC address for for Network User different AAA treatments. A user glob is a string used by AAA and IEEE

Classification 802.1X or WebAAA methods to match a user or set of users. MAC address globs match authentication methods to a MAC address or set of MAC addresses. User globs and MAC address globs can make use of wildcards. For details, see “User Globs, MAC Address Globs, and VLAN Globs” on page 30.

A user group is a named collection of users or MAC addresses sharing a common authorization policy. For example, you might group all users on the first floor of building 17 into the group bldg-17-1st-floor, or group all users in the IT group into the group infotech-people.

AAAMethods for IEEE 802.1X and Web Network Access

Wildcard “Any” for SSID Matching

Authentication rules for wireless access include the SSID name, and must match on the SSID name requested by the user for MSS to attempt to authenticate the user for that SSID. To make an authentication rule match an any SSID string, specify the SSID name as any in the rule.

The following AAA methods are supported by 3Com for 802.1X and Web network access mode:

„Client certificates issued by a certificate authority (CA) for authentication.

(For this method, you assign an authentication protocol to a user. For protocol details, see “IEEE 802.1X Extensible Authentication Protocol Types” on page 446.)

„The WX local database of usernames and user groups for authentication.

(For configuration details, see “Adding and Clearing Local Users for Administrative Access” on page 59, “Authenticating via a Local Database” on page 450, and “Adding and Clearing MAC Users and User Groups Locally” on page 456.)

„A named group of RADIUS servers. The WX switch supports up to four server groups, which can each contain between one and four servers.

(For server group details, see “Configuring RADIUS Server Groups” on page 524.)

Page 441 Page 443
Page 442
Image 442
3Com WX1200 3CRWX120695A, WXR100 3CRWXR10095A, WX4400 3CRWX440095A, WX2200 3CRWX220095A manual Wildcard Any for Ssid Matching
Page 441 Page 443

WX1200 3CRWX120695A, WX4400 3CRWX440095A, WXR100 3CRWXR10095A, WX2200 3CRWX220095A specifications

The 3Com WX2200 (3CRWX220095A), WX4400 (3CRWX440095A), WX1200 (3CRWX120695A), and WXR100 (3CRWXR10095A) are part of a robust suite of wireless networking solutions offered by 3Com, designed to meet the needs of modern enterprise environments. These devices provide reliable connectivity, flexibility, and scalability, making them ideal for businesses of all sizes.

The 3Com WX2200 is a high-performance wireless switch that supports up to 64 access points, making it suitable for medium to large deployments. It boasts advanced features such as dynamic RF management, which optimizes channel selection and power levels based on real-time network conditions. This ensures maximum coverage and minimizes interference, leading to improved user experiences. Additionally, it supports dual-band operation and can seamlessly integrate with various wireless access points, providing enhanced throughput and robust performance.

The WX4400 is designed for high-density environments and offers extensive scalability. It supports up to 128 access points and is equipped with advanced security features, including WPA2 enterprise encryption and role-based access control. This switch also features intelligent load balancing, allowing it to dynamically distribute user traffic across available access points, thus enhancing overall network efficiency.

The WX1200, positioned as an entry-level solution, is well-suited for small to medium-sized businesses. It offers a user-friendly management interface, allowing IT staff to quickly configure and monitor the network. This device supports a variety of deployment scenarios and can be easily integrated into existing infrastructure. It also comes equipped with essential security features to protect the network from unauthorized access.

The WXR100 complements the series by providing simplified management for access points, ensuring that businesses can easily deploy and maintain their wireless networks. It supports various management protocols and integrates with a variety of third-party systems, enhancing inter-operability. With Power over Ethernet (PoE) support, the WXR100 can deliver power to connected access points, reducing the complexity and costs associated with additional power infrastructure.

Together, these solutions embody 3Com's commitment to delivering high-quality networking products that enhance connectivity and performance. With features such as scalability, advanced security, dynamic load balancing, and centralized management, the WX2200, WX4400, WX1200, and WXR100 form a comprehensive wireless networking ecosystem tailored for today’s enterprise challenges.
Top Page Image Contents