Nortel Networks 2300 manual Wildcards and Groups for Network User Classification

Configuring AAA for Network Users 411

“Wildcards” and Groups for Network User Classification

“Wildcards” let you classify users by username or MAC address for different AAA treatments. A user wildcard is a string used by AAA and IEEE 802.1X or Web-based AAA methods to match a user or set of users. MAC address wildcards match authentication methods to a MAC address or set of MAC addresses. User wildcards and MAC address wildcards can make use of wildcards. For details, see “User Wildcards, MAC Address Wildcards, and VLAN Wildcards” on page 39.

A user group is a named collection of users or MAC addresses sharing a common authorization policy. For example, you might group all users on the first floor of building 17 into the group bldg-17-1st-floor, or group all users in the IT group into the group infotech-people.

Wildcard “Any” for SSID Matching

Authentication rules for wireless access include the SSID name, and must match on the SSID name requested by the user for WSS Software to attempt to authenticate the user for that SSID. To make an authentication rule match an any SSID string, specify the SSID name as any in the rule.

Nortel WLAN Security Switch 2300 Series Configuration Guide