User`s manual

48
DWS-1008 User’s Manual
D-Link Systems, Inc.
Configuration (continued)
Conguration
Authentication Example for Users in a UNIX Domain
The following commands add authentication rules for user globs in a UNIX domain. Users are
authenticated by using any supported EAP type to communicate with EAP-capable RADIUS
server group grp1.
DWS-1008# set authentication dot1x ssid private_wlan *@mktg.example.com
pass-through grp1
success: change accepted.
DWS-1008# set authentication dot1x ssid private_wlan *@eng.example.com
pass-through grp1
success: change accepted.
DWS-1008# set authentication dot1x ssid private_wlan *@*.*.com pass-through grp1
success: change accepted.
DWS-1008# set authentication dot1x ssid private_wlan *@*.com pass-through grp1
success: change accepted.
Displaying the Server Group and Authentication Conguration
The show aaa command displays the server group and authentication conguration on a
switch. In the following example, the conguration contains a server group with two RADIUS
servers and an authentication rule for users in a Windows domain.
DWS-1008# show aaa
Default Values
authport=1812 acctport=1813 timeout=5 acct-timeout=5 retrans=3 deadtime=0 key=(null)
author-pass=(null)
Radius Servers
Server Addr Ports T/o Tries Dead State
--------------------------------------------------------------------------------
svr1 10.10.70.20 1812 1813 5 3 0 UP
svr2 10.10.70.40 1812 1813 5 3 0 UP
Server groups
grp1 (load-balanced): svr1 svr2
set authentication dot1x ssid private_wlan EXAMPLE\* pass-through grp1