Specifications

Network User Configuration Scenarios
17-64 Configuring AAA for Network Users
During802.1XauthorizationforclientsatEXAMPLE\,MSSmustsearchfortheMobilityProfile
namedroses‐profile.Ifitisnotfound,theauthorizationfailsandclientswithusernameslike
EXAMPLE\joseandEXAMPLE\tamaraarerejected.
Ifroses‐profileisconfiguredforEXAMPLE\usersonyourRoamAboutSwitch,MSSchecksitsport

list.If,forexample,thecurrentportforEXAMPLE\jose’sconnectionisonthelistofallowedports
specifiedinroses‐profile,theconnectionisallowedtoproceed.Iftheportisnotinthelist(for
example,EXAMPLE\joseisonport 12 ,whichisnotintheportlist),the a uthorization
failsand
clientEXAMPLE\joseisrejected.
TheMobilityProfilefeatureisdisabledbydefault.Youmust enable MobilityProfileattributeson
theRoamAboutSwitchtouseit.YoucanenableordisablethefeatureforthewholeRoamAbout
Switchonly.IftheMobilityProfilefeatureisdisabled,allMobilityProfileattributes
areignored.
ToputMobilityProfileattributesintoeffectonaRoamAboutSwitch,typethefollowing
command:
RBT-8100# set mobility-profile mode enable
success: change accepted.
TodisplaythenameofeachMobilityProfileanditsports,typethefollowingcommand:
RBT-8100# show mobility-profile
Mobility Profiles
Name Ports
=========================
roses-profile
AP 2
AP 3
AP 4
AP 7
AP 9
ToremoveaMobilityProfile,typethefollowing command:
clear mobility-profile name
Network User Configuration Scenarios
ThefollowingscenariosprovideexamplesofwaysinwhichyouuseAAAcommandstoconfigure
accessforusers:
•“GeneralUseofNetworkUserCommands”onpage 17‐65
•“EnablingRADIUSPass‐ThroughAuthentication”onpage 17‐66
•“EnablingPEAP‐MS‐CHAP‐V2Authentication”onpage 17‐67
•“EnablingPEAP‐MS‐CHAP‐V2
Offload”onpage 17‐67
•“CombiningEAPOffloadwithPass‐ThroughAuthentication”onpage 17‐68
•“OverridingAAA‐AssignedVLANs”onpage 17‐68