Specifications

Network User Configuration Scenarios
RoamAbout Mobility System Software Configuration Guide 17-65
General Use of Network User Commands
ThefollowingexampleillustrateshowtoconfigureIEEE802.1Xnetworkusersforauthentication,
accounting,ACLfiltering,and MobilityProfileassignment:
1. Configureall802.1XusersofSSIDmycorpatEXAMPLEtobeauthenticated byservergroup
shorebirds.Typethefollowingcommand:
RBT-8100# set authentication dot1x ssid mycorp EXAMPLE\* pass-through
shorebirds
2. Configurestop‐onlyaccountingforallmycorpusersatEXAMPLE,foraccountingrecordsto
bestoredlocally.Typethefollowingcommand:
RBT-8100# set accounting dot1x ssid mycorp EXAMPLE\* stop-only local
success: change accepted.
3. ConfigureanACLtofiltertheinboundpacketsforeachuseratEXAMPLE.Typethe
followingcommandforeachuser:
RBT-8100# set user EXAMPLE\username attr filter-id acl-101.in
Thiscommandappliestheaccesslistnamedacl‐101toeachuseratEXAMPLE.
4. TodisplaytheACL,typethefollowingcommand:
RBT-8100# show security acl info acl-101
set security acl ip acl-101 (hits #0 0)
----------------------------------------------------
1. permit IP source IP 192.168.1.1 0.0.0.255 destination IP any enable-hits
(FormoreinformationaboutACLs,seeChapter 15,ConfiguringandManagingSecurity
ACLs.)
5. CreateaMobility Profilecalledtulipbytypingthefollowingcommands:
RBT-8100# set mobility-profile name tulip port 2,5-9
success: change accepted.
RBT-8100# set mobility-profile mode enable
success: change accepted.
RBT-8100# show mobility-profile
Mobility Profiles
Name Ports
=========================
tulip
AP 2
AP 6
AP 7
AP 8
AP 9
6. ToassignMobilityProfiletuliptoallusers atEXAMPLE,typethefollowingcommandforeach
EXAMPLE\user:
RBT-8100# set user EXAMPLE\username attr mobility-profile tulip
UsersatEXAMPLEarenowrestrictedtoports 2and5through9,asspecified inthetulip
MobilityProfi leconfiguration.