316 CHAPTER 8: C ONFIGURING AUTHENTICATION , AUTHORIZATION , AND ACCOUNTING PARAMETERSCreating a Web AAANetwork Access RuleTo create a Web AAA network access rule:1 Access the Create MAC Network Access wizard:a Select the Configuration tool bar option.b In the Organizer panel, click the plus sign next to the WX switch.c Click the plus sign next to AAA.d Select MAC Access Rules.e In the Task List panel, select MAC Network Access.2 Specify whether the rule is for wireless access to an SSID or accessthrough a wired authentication port: If the rule is for access to an SSID, do one of the following: To match on any SSID name, leave the value any in the SSID box. To match only on a specific SSID name, select or type the name inthe SSID box. If the rule is for access through a wired authentication port, selectWired.CAUTION: The default SSID name any matches on all SSID names. If theSSID box contains any and you do not change the SSID name, theauthentication rule allows clients who match the userglob to access anySSID.3 Type the userglob that is allowed to use Web AAA to access the SSID orwired authentication port.A user glob is a string containing wildcards that matches on one or moreuser names. Type a full or partial username to be matched duringauthentication (1 to 80 alphanumeric characters, with no spaces or tabs).The format of a user glob depends on the client type and EAP method.For Windows domain clients using Protected EAP (PEAP), the user glob isin the format Windows_domain_name\username. The Windows domainname is the NetBIOS domain name and must be specified in capitalletters. For example, EXAMPLE\sydney, or EXAMPLE\*.*, which specifiesall usernames whose usernames contain periods.
