Usage: You can configure different authentication methods for different groups of users. (For details, see “User Globs, MAC Address Globs, and VLAN Globs” on page 7.)

If you specify multiple authentication methods in the set authentication console command, MSS applies them in the order in which they appear in the command, with these results:

If the first method responds with pass or fail, the evaluation is final.

If the first method does not respond, MSS tries the second method, and so on.

However, if local appears first, followed by a RADIUS server group, MSS ignores any failed searches in the local database and sends an authentication request to the RADIUS server group.

Examples: To set the console port so that it does not enforce username-password authentication for administrators, type the following command:

DWS-1008# set authentication console * none success: change accepted.

See Also:

clear authentication console

set authentication admin

set authentication dot1x

set authentication mac

set authentication web

show aaa

set authentication dot1x

Configures authentication and defines how and where it is performed for specified wireless or wired authentication clients who use an IEEE 802.1X authentication protocol to access the network through the switch.

Syntax: set authentication dot1x {ssid ssid-name wired} user-glob[bonded] protocol method1 [method2] [method3] [method4]

ssid ssid-nameSSID name to which this authentication rule applies. To apply the rule to all

 

 

SSIDs, type any.

 

 

wired

Applies this authentication rule specifically to users connected to a wired

 

 

authentication port.

 

 

user-glob

A single user or a set of users with 802.1X network access. Specify a username,

 

 

use the double-asterisk wildcard character (**) to specify all usernames, or

 

 

use the single-asterisk wildcard character (*) to specify a set of usernames up

 

 

to or following the first delimiter character—either an at sign (@) or a period (.).

 

 

(For details, see “User Globs” on page 6.)

 

 

 

 

D-Link DWS-1008 CLI Manual

189

Page 192
Image 192
D-Link dws-1008 Set authentication dot1x, Authentication port, For details, see User Globs on Link DWS-1008 CLI Manual 189