For example,Figure 54 depicts a network consisting of several subdomains in corpnet.com. The server radius-1
provides 802.1x machine authentication to PC clients in xyz.corpnet.com,sales.corpnet.com, and hq.corpnet.com.
The serverradius-2 provides authenticati on for users in abc.corpnet.com.
Figure 54: Domain-BasedServer SelectionEx ample
You configurethe following rules for serversi nt hec orp-servserver group:
lradius-1 is selected if the client information starts with “host /”.
lradius-2 is selected if the client information contains “abc.corpnet.com”.
Using the WebUI
1. Navigate t o the Configuration > Security > Authentication > Servers page.
2. Under the Servers tab, select Server G roup to display the Server Group list.
3. E ntercor p-serv fort he new servergroup and click Add.
4. Under the Servers tab, select corp-serv to configurethe server group.
5. Under Servers, click New to add the radius-1 server to the group.Select radius-1 from the drop-down menu.
a. For Match Type, select Authstring.
b. For Operator, select starts-wit h.
c. For Match String, enterhost/ .
d. Click Add Rule >>.
e. Scrollto the right and click Add Server.
6. Under Servers, click New to add the radius-2 server to the group.Select radius-2 from the drop-down menu.
a. For Match Type, select Authstring.
b. For Operator, select contains.
c. For Match String, enterabc.corpnet.com.
d. Click Add Rule >>.
e. Scrollto the right and click Add Server.
NOTE:The l astserver you added to the server group (radius-2)automatically appears as the first server in the list. In thisexampl e,
theorder of servers is not important. If you need toreorder the server list, scroll to the right and click the up or down arrow for the
appropriateserver.
7. Click Apply.
DellPowerConnect W- Series ArubaOS 6.2 | User Guide AuthenticationServers | 180