CLI Reference Guide

Configuring and Managing Access Rules for Network Users 295
MAC addresses must be specified with colons as the delimiters (for
example, 00:11:22:33:44:55). You can use wildcards by specifying an
asterisk (*) in MAC addresses. The following lists examples of using
wildcards in MAC addresses:
* (all MAC addresses)
00:*
00:01:*
00:01:02*
00:01:02:03:*
00:01:02:03:04:*
00:01:02:03:04:0*
Last-resort access does not need a userglob or MAC address glob. If you
configure a last-resort access rule for the SSID and you enable
last-resort as the fallthru authentication type, any user can access that
SSID. (The default fallthru type is None. To change the fallthru
authentication type, see “Configuring a Service Profile” on page 238.)
4 Optionally, edit the name in the SSID box to match the SSID name.
CAUTION: The default SSID name any matches on all SSID names. If the
SSID box contains any and you do not change the SSID name, the
authentication rule allows clients who match the userglob or MAC
address glob to access any SSID.
5 To enable the authentication rule for use with wired authentication users,
select Wired. When you enable this option, the rule applies to
connection attempts on a WX switch’s wired authentication ports, in
addition to wireless connection attempts through a MAP.
6 Click Next and go to “To configure authentication settings”.
To configure authentication settings
1 Access the Create Network Access wizard for 802.1X, MAC, last-resort,
or WebAAA, if not already displayed.
2 Go to one of the following steps:
 If you are configuring an 802.1X authentication rule for the SSID, go
to step 3.
 If you are configuring a MAC, last-resort, or WebAAA rule for the
SSID, go to step 4.