Configuring Location Policies 339
You can add one or both methods to the list.
■ If you specify a RADIUS server group as the first method and a user is
denied access by the RADIUS server, no accounting is attempted with
the other methods specified in the list.
■ If you specify LOCAL as the first method and a user is not in the local
user database on the WX, accounting is attempted with a RADIUS
server group if one is defined in the method list.
To add a server group, click Create and go to “To define a RADIUS server
group” on page 298. After you create the server group, click Choose
Available and then select the server group from the list.
5 Click Finish to save changes and close the wizard.
Changing the Order
of Access Rules
Initially, the order of the access rules is based on the order in which you
created them. This determines the order in which the WX matches users
to user globs. The arrangement of access rules is important to avoid
unintentionally denying access to users.
Generally, you want the rules in order of most restrictive to least
restrictive, for example:
■ sysadmin@example.com
■ *@it.example.com
■ *@*.example.com
To change the order of access rules
1 From the AAA page of the WX Switch wizard, select Admin Access or
Network Access.
2 Select a rule from the list of rules.
3 To change the position of the rule, click Move Up or Move Down until
the rule is in the position you want.
4 To move other rules, repeat step 2 and step 3 until all rules are in the
order you want.
5 To close the wizard and save the changes, click Finish.
Configuring
Location Policies
During the login process, wireless and wired clients authenticate to the
WX, and then the AAA authorization process is immediately started.
To Next Page
Loading...
