Manuals / 3Com / Computer Equipment / Switch

3Com WXR100 3CRWXR10095A, WX4400 3CRWX440095A manual Configuring AAA for Network Users

Models: WX1200 3CRWX120695A WX4400 3CRWX440095A WXR100 3CRWXR10095A WX2200 3CRWX220095A

1 728
Download 728 pages 48.88 Kb
Page 464
Image 464

464CHAPTER 21: CONFIGURING AAA FOR NETWORK USERS

„Fallthru authentication type—The fallthru authentication type for each SSID and wired authentication port that you want to support WebAAA, must be set to web-portal. The default authentication type for wired authentication ports and for SSIDs is None (no fallthru authentication is used).

To set the fallthru authentication type for an SSID, set it in the service profile for the SSID, using the set service-profileauth-fallthrucommand. To set it on a wired authentication port, use the auth-fall-thruweb-portalparameter of the set port type wired-authcommand.

„Authorization attributes—Wireless Web-Portal users get their authorization attributes from the SSID’s service profile. To assign wireless Web-Portal users to a VLAN, use the set service-profilename attr vlan-namevlan-idcommand.

Web-Portal users on wired authentication ports get their authorization attributes from the special user web-portal-wired. To assign wired Web-Portal users to a VLAN, use the set user web-portal-wired attr vlan-namevlan-idcommand. By default, web-portal-wiredusers are assigned to the default VLAN.

„Portal ACL (created by MSS automatically)—The portalacl ACL captures all the portal user’s traffic except for DHCP traffic. The portalacl has the following ACEs:

set security acl ip portalacl permit udp 0.0.0.0 255.255.255.255 eq 68 0.0.0.0 255.255.255.255 eq 67

set security acl ip portalacl deny 0.0.0.0 255.255.255.255 capture

MSS automatically creates the portalacl ACL the first time you set the fallthru authentication type on any service profile or wired authentication port to web-portal.

„The ACL is mapped to wireless Web-Portal users through the service profile. When you set the fallthru authentication type on a service profile to web-portal, portalacl is set as the Web-Portal ACL. The ACL is applied to a Web-Portal user’s traffic when the user associates with the service profile’s SSID.

„The ACL is mapped to Web-Portal users on a wired-authentication port by the Filter-id.in attribute configured on the web-portal-wired user. When you set the fallthru authentication type on a wired authentication port to web-portal, MSS creates the web-portal-wired user. MSS sets the filter-id attribute on the user to portalacl.in.

Page 463 Page 465
Page 464
Image 464
3Com WXR100 3CRWXR10095A, WX4400 3CRWX440095A, WX1200 3CRWX120695A, WX2200 3CRWX220095A Configuring AAA for Network Users
Page 463 Page 465

WX1200 3CRWX120695A, WX4400 3CRWX440095A, WXR100 3CRWXR10095A, WX2200 3CRWX220095A specifications

The 3Com WX2200 (3CRWX220095A), WX4400 (3CRWX440095A), WX1200 (3CRWX120695A), and WXR100 (3CRWXR10095A) are part of a robust suite of wireless networking solutions offered by 3Com, designed to meet the needs of modern enterprise environments. These devices provide reliable connectivity, flexibility, and scalability, making them ideal for businesses of all sizes.

The 3Com WX2200 is a high-performance wireless switch that supports up to 64 access points, making it suitable for medium to large deployments. It boasts advanced features such as dynamic RF management, which optimizes channel selection and power levels based on real-time network conditions. This ensures maximum coverage and minimizes interference, leading to improved user experiences. Additionally, it supports dual-band operation and can seamlessly integrate with various wireless access points, providing enhanced throughput and robust performance.

The WX4400 is designed for high-density environments and offers extensive scalability. It supports up to 128 access points and is equipped with advanced security features, including WPA2 enterprise encryption and role-based access control. This switch also features intelligent load balancing, allowing it to dynamically distribute user traffic across available access points, thus enhancing overall network efficiency.

The WX1200, positioned as an entry-level solution, is well-suited for small to medium-sized businesses. It offers a user-friendly management interface, allowing IT staff to quickly configure and monitor the network. This device supports a variety of deployment scenarios and can be easily integrated into existing infrastructure. It also comes equipped with essential security features to protect the network from unauthorized access.

The WXR100 complements the series by providing simplified management for access points, ensuring that businesses can easily deploy and maintain their wireless networks. It supports various management protocols and integrates with a variety of third-party systems, enhancing inter-operability. With Power over Ethernet (PoE) support, the WXR100 can deliver power to connected access points, reducing the complexity and costs associated with additional power infrastructure.

Together, these solutions embody 3Com's commitment to delivering high-quality networking products that enhance connectivity and performance. With features such as scalability, advanced security, dynamic load balancing, and centralized management, the WX2200, WX4400, WX1200, and WXR100 form a comprehensive wireless networking ecosystem tailored for today’s enterprise challenges.