HP Manager Software manual Authentication To configure authentication rules

Models: Manager Software

1 506
Download 506 pages 24.55 Kb
Page 293
Image 293

Configuring and Managing Access Rules for Network Users 293

„Service-Type— Type of access the user is requesting, which can be network access, administrative access to the enabled (configuration) mode of the MSS CLI, or administrative access to the nonenabled mode of the CLI.

„Session-Timeout— Maximum number of seconds allowed for the user’s session.

Regardless of whether you configure the user and attributes on RADIUS servers or the WX switch’s local database, the VLAN attribute is required. The other attributes are optional.

Accounting MSS also supports accounting. Accounting collects and sends information used for billing, auditing, and reporting — for example, user identities, connection start and stop times, the number of packets received and sent, and the number of bytes transferred. You can track sessions through accounting information stored locally or on a remote RADIUS server. As network users roam throughout a Mobility Domain, accounting records track them and their network usage.

Configuring You can configure authentication rules and settings.

Authentication

To configure authentication rules

1Do one of the following:

„From the AAA page of the WX Switch wizard, select Network Access.

„From the Create SSID wizard, click Network Access.

2Click New, and select an authentication type from the list, to configure an authentication rule for accessing the SSID.

You can configure more than one type of authentication rule for the same SSID. A WX switch attempts them in the following order:

„802.1X Network Access — If the client name matches the userglob, WX switch attempts to authenticate the client using 802.1X. If the usergob does not match or the client does not support 802.1X, the switch next tries MAC authentication.

„MAC Network Access — WX switch attempts to authenticate the client using MAC authentication. If the client’s MAC address does not match the MAC address glob, the WX switch tries last-resort authentication.

Page 293
Image 293
HP Manager Software manual Authentication To configure authentication rules