Nortel Networks 2300 General Use of Network User Commands, 23x0# show security acl info acl-101

470Configuring AAA for Network Users

General Use of Network User Commands

The following example illustrates how to configure IEEE 802.1X network users for authentication, accounting, ACL filtering, and Mobility Profile assignment:

1Configure all 802.1X users of SSID mycorp at EXAMPLE to be authenticated by server group shorebirds. Type the following command:

2370# set authentication dot1x ssid mycorp EXAMPLE\* pass-through shorebirds

2Configure stop-only accounting for all mycorp users at EXAMPLE, for accounting records to be stored locally. Type the following command:

23x0# set accounting dot1x ssid mycorp EXAMPLE\* stop-only local success: change accepted.

3Configure an ACL to filter the inbound packets for each user at EXAMPLE. Type the following command for each user:

23x0# set user EXAMPLE\username attr filter-id acl-101.in

This command applies the access list named acl-101to each user at EXAMPLE.

4To display the ACL, type the following command:

23x0# show security acl info acl-101

set security acl ip acl-101 (hits #0 0)

----------------------------------------------------

1.permit IP source IP 192.168.1.1 0.0.0.255 destination IP any enable-hits

(For more information about ACLs, see “Configuring and Managing Security ACLs,” on page 351.)

5Create a Mobility Profile called tulip by typing the following commands:

23x0# set mobility-profile name tulip port 2,5-9 success: change accepted.

23x0# set mobility-profile mode enable success: change accepted.

23x0# show mobility-profile

Mobility Profiles

NamePorts

=========================

tulip

AP 2

AP 6

AP 7

AP 8

AP 9

6To assign Mobility Profile tulip to all users at EXAMPLE, type the following command for each EXAMPLE\ user:

23x0# set user EXAMPLE\username attr mobility-profile tulip

320657-A