CLI Reference Guide

270 CHAPTER 7: CONFIGURING AUTHENTICATION, AUTHORIZATION, AND ACCOUNTING PARAMETERS
You can create two types of users in the local database:
 Named users — These users are authenticated by username and
password and are assigned to specific VLANs. Users include
administrators and network users. You can group these users by
creating user groups, in order to simplify configuration.
 MAC address users — These users are authenticated by a MAC
address. For example, devices such as PDAs or cellular phones that do
not support 802.1X authentication are identified when the WX switch
discovers the MAC addresses of these devices from received frames.
The MAC address is the username and is authenticated by the local
database. You can group these users by creating user groups. MAC
address users and user groups cannot be assigned administrative
access to the WX switch.
Creating Named
Users
When creating named users, you configure authentication properties.
You can optionally configure user attributes, which are stored in the local
database.
To configure user authentication properties
1 Access the WX Switch wizard for the switch. (See “Accessing the WX
Switch Wizard” on page 187.)
2 Select AAA at the top of the wizard, if not already selected.
3 Select User from the organizer list on the left side of the page, if not
already selected.
4 Click New and select New User. The Create User wizard appears.
5 In the Name box, type the name of the user (1 to 60 alphanumeric
characters, with no spaces or tabs).
6 In the VLAN Name box, type the name of the VLAN that the user belongs
to (1 to 16 alphanumeric characters, with no spaces or tabs). The WX
switch will authorize the user for that VLAN. For more information on
VLANs, see “Configuring VLANs” on page 189.
If the user requires administrative access only, you do not need to specify
a VLAN.
7 In the Password box, type the password for the user (1 to 80
alphanumeric characters, with no spaces or tabs). You must specify a
password if you want the password to be encrypted in the configuration
file.