Specifications

Authentication Configuration Example

April 15, 2011 Page 33 of 36

ThefollowingCLIinput:

•EnablesCEPgloballyontheswitch.

•SetsCEPpolicytoapreviouslyconfiguredpolicynamedsiemenswithanindexof9.

•Setsportsge.1.16‐18toonlyacceptdefaultSiemenstypephonesandappliestheSiemens

policytothespecifiedports.

System(rw)->set cep enable

System(rw)->set cep policy siemens 9

System(rw)->set cep port ge.1.16-18 siemens enable

ThiscompletestheSiemensCEPend‐userstationsconfiguration.

Configuring the Printer Cluster for MAC-Based Authentication

PerformthefollowingtaskstoconfigureMAC‐basedauthenticationfortheprinterclusterinour

example:

•SetupanaccountforeachprinterontheauthenticationserverthatcontainstheprinterMAC

address,theMACauthenticationpasswordconfiguredontheswitch,andaRADIUSFilter‐ID

entryspecifyingtheprinterpolicy.

• Configure

apolicyusingthepolicymanagerspecifyingtheprinterclusterVLANand

optionallyconfiguringaCoSandratelimit.

•EnableMACau thenticationgloballyontheswitch.

•EntertheMACauthenticationpasswordasenterasysontheswitch.

•SettheMACauthenticationsignificant‐bitsto24.

•EnableMACau thenticationontheportsusedby

theprintercluster:ge.1.3‐4

Withtheauthenticationserverconfiguredwith aRADIUSaccountforeachprinter,andtheprinter

policypreconfigured,enterthefollowingCLIinput:

System(rw)->set macauthentication enable

System(rw)->set macauthentication password enterasys

System(rw)->set macauthentication significant-bits 24

System(rw)->set macauthentication port enable ge.1.3-4

ThiscompletestheprinterclusterMACauthenticationconfiguration.

Configuring the Public Area PWA Station

ThepublicareaPWAstat ion providesvisitorstoyourbusinesssitewithopenaccesstothe

internet,whileatthesametimeisolatingthestationfromanyaccesstoyourinternalnetwork.In

ordertoprovideadefaultsetofnetworkresourcestocommunicateoverHTTP,policymustbeset

onlyallowDHCP,ARP,DNS,andHTTP.Youmay wanttosetaratelimitthatwouldguard 

againstexcessivestreaming.YouwillalsoneedtosetupRADIUSforthepublicstationaccounton

theauthenticationserver.Thisconfigurationwillincludetheguestname, password,anda

RADIUSFilter‐

IDforthepublicpolicy.

PerformthefollowingtaskstoconfigurethepublicstationforPWAauthentication:

• Configurethepolicyappropriatetothepublicstation.