CLI Reference Guide
304 CHAPTER 7: CONFIGURING AUTHENTICATION, AUTHORIZATION, AND ACCOUNTING PARAMETERS
For the userglob, type a full or partial username to be matched during
authentication (1 to 80 alphanumeric characters, with no spaces or tabs).
The format of a user glob depends on the client type and EAP method.
For Windows domain clients using Protected EAP (PEAP), the user glob
is in the format
Windows_domain_name\username. The Windows
domain name is the NetBIOS domain name and must be specified in
capital letters. For example, EXAMPLE\sydney, or EXAMPLE\*.*, which
specifies all usernames whose usernames contain periods.
For EAP with Transport Layer Security (EAP-TLS) clients, the format is
username@domain_name. For example, sydney@example.com specifies
the user sydney in the domain name example.com. The
*@marketing.example.com glob specifies all users in the marketing
department at example.com. The user glob
sydney@engineering.example.com specifies the user sydney in the
engineering department at example.com.
6 Optionally, edit the name in the SSID box.
CAUTION The default SSID name any matches on all SSID names. If the
SSID box contains any and you do not change the SSID name, the rule
allows clients who match the userglob to access any SSID.
7 To select the AAA method, click Choose Available, then select a
RADIUS server group. (LOCAL is not supported.)
To add a server group, click Create and go to “To define a RADIUS server
group” on page 268. After you create the server group, click
Choose Available and then select the server group from the list.
8 Click Finish to close the wizard and save the changes.
To create a RADIUS proxy client entry
1 Access the Modify WX Switch wizard for the switch. (See “Accessing the
WX Switch Wizard” on page 187.)
2 Select AAA at the top of the wizard, if not already selected.
3 Select RADIUS Proxy Client from the organizer list on the left side of the
page, if not already selected.
4 Click New RADIUS Proxy Client. The Create RADIUS Proxy Client
wizard appears.
5 Type the IP address of the third-party AP.