319
DWS-1008 User’s Manual
D-Link Systems, Inc.
Configuring AAA for Network Users
Suppose the wireless users on the faculty of a college English department have offices
in building A and are authorized to use that building’s
bldga-prof-
VLANs. These users
also teach classes in building B. Because you do not want to tunnel these users back to
building A from building B when they use their wireless laptops in class, you configure the
location policy on the switch to redirect them to the
bldgb-eng
VLAN.
You also want to allow writing instructors normally authorized to use any -
techcomm
VLAN in the college to access the network through the
bldgb-eng
VLAN when they are in
building B.
1.
Redirect
bldga-prof-
VLAN users to the VLAN
bldgb-eng
:
DWS-1008#
set location policy permit vlan bldgb-eng if vlan eq bldga-prof-*
2.
Allow writing instructors from -
techcomm
VLANs to use the
bldgb-eng
VLAN:
DWS-1008#
set location policy permit vlan bldgb-eng if vlan eq *-techcomm
3.
Display the configuration:
DWS-1008#
show location policy
Id Clauses
-----------------------------------------------------
1) permit vlan bldgb-teach if vlan eq bldga-prof-*
2) permit vlan bldgb-eng if vlan eq *-techcomm
4.
Save the configuration:
DWS-1008
save config
success: configuration saved.
(Footnotes)
1
1. EAP-MD5 does not work with Microsoft wired authentication client
Summary of Contents for DWS-1008
Page 1: ......
