3Com WXR100 3CRWXR10095A, WX4400 3CRWX440095A, WX1200 3CRWX120695A manual Network User

512CHAPTER 21: CONFIGURING AAA FOR NETWORK USERS

Network User	The following scenarios provide examples of ways in which you use AAA
Configuration	commands to configure access for users:
Scenarios	„ “General Use of Network User Commands” on page 512
	„ “Enabling RADIUS Pass-Through Authentication” on page 514
	„ “Enabling PEAP-MS-CHAP-V2 Authentication” on page 514
	„ “Enabling PEAP-MS-CHAP-V2 Offload” on page 515
	„ “Combining EAP Offload with Pass-Through Authentication” on
	page 516
	„ “Overriding AAA-Assigned VLANs” on page 516

General Use of The following example illustrates how to configure IEEE 802.1X network Network User users for authentication, accounting, ACL filtering, and Mobility Profile

Commands assignment:

1Configure all 802.1X users of SSID mycorp at EXAMPLE to be authenticated by server group shorebirds. Type the following command:

WX1200# set authentication dot1x ssid mycorp EXAMPLE\* pass-through shorebirds

2Configure stop-only accounting for all mycorp users at EXAMPLE, for accounting records to be stored locally. Type the following command:

WX1200# set accounting dot1x ssid mycorp EXAMPLE\* stop-only local success: change accepted.

3Configure an ACL to filter the inbound packets for each user at EXAMPLE. Type the following command for each user: <<syntax valid?>>

WX1200# set user EXAMPLE\username attr filter-id = acl-101.in

This command applies the access list named acl-101to each user at

EXAMPLE.

4To display the ACL, type the following command:

WX1200# display security acl info acl-101 set security acl ip acl-101 (hits #0 0)

----------------------------------------------------

1. permit IP source IP 192.168.1.1 0.0.0.255 destination IP any enable-hits

(For more information about ACLs, see Chapter 19, “Configuring and Managing Security ACLs,” on page 377.)