Configuring and Managing Access Rules for Network Users 295

MAC addresses must be specified with colons as the delimiters (for example, 00:11:22:33:44:55). You can use wildcards by specifying an asterisk (*) in MAC addresses. The following lists examples of using wildcards in MAC addresses:

*(all MAC addresses) 00:* 00:01:* 00:01:02* 00:01:02:03:* 00:01:02:03:04:* 00:01:02:03:04:0*

Last-resort access does not need a userglob or MAC address glob. If you configure a last-resort access rule for the SSID and you enable last-resortas the fallthru authentication type, any user can access that SSID. (The default fallthru type is None. To change the fallthru authentication type, see “Configuring a Service Profile” on page 238.)

4Optionally, edit the name in the SSID box to match the SSID name.

CAUTION: The default SSID name any matches on all SSID names. If the SSID box contains any and you do not change the SSID name, the authentication rule allows clients who match the userglob or MAC address glob to access any SSID.

5To enable the authentication rule for use with wired authentication users, select Wired. When you enable this option, the rule applies to connection attempts on a WX switch’s wired authentication ports, in addition to wireless connection attempts through a MAP.

6Click Next and go to “To configure authentication settings”.

To configure authentication settings

1Access the Create Network Access wizard for 802.1X, MAC, last-resort, or WebAAA, if not already displayed.

2Go to one of the following steps:

„If you are configuring an 802.1X authentication rule for the SSID, go to step 3.

„If you are configuring a MAC, last-resort, or WebAAA rule for the SSID, go to step 4.

Page 295
Image 295
HP Manager Software manual To configure authentication settings