User's Manual Part 2


77JadeOSUserManual

Forexample：
(JadeOS) (config)#ip access-list session acl1
(JadeOS) (config-sess-acl1)#host 1.1.1.1 any tcp 1 100 deny
(JadeOS) (config-sess-acl1)#exit
(JadeOS) (config)#user-role role1
(JadeOS) (config-role)#access-list session acl1
(JadeOS) (config-role)#exit
(JadeOS) (config)#aaa profile aaa1
(JadeOS) (AAA profile "aaa1")#initial-role role1
(JadeOS) (AAA profile "aaa1")#exit
(JadeOS) (config)#wlan virtual-ap default
(JadeOS) (Virtual AP Profile "default")#aaa-profile aaa1
(JadeOS) (Virtual AP Profile "default")#exit
10.8AuthenticationExemption
For the special user that accounting exemption such as administrator and so on,
JadeOSsupportsauthenticationexemption,forexample:
Step1ConfigureAAAprofile,disableradius‐accounting
(JadeOS) (config)#aaa profile a1
(JadeOS) (AAA profile "a1")#no radius-accounting enable
(JadeOS) (AAA profile "a1")#exit
Step2ApplyAAApro filetotheVLAN
(JadeOS) (config)#vlan 10 aaa profile a1
10.9Anti‐fakeandRogueAPdetect
Anti‐fake
Toenable anti‐fakefunction,usethefollowingcommand:
validate-sta-enable
Todisable anti‐fakefunction,usethefollowingcommand:
no validate-sta-enable
RogueAPDetect
ACwillconfiguredetectruleaccordingtothemessagesentbyAP,thatistomakea
detectpolicyforrogueequipment;thenACwillclassifytheAPsaccordingtothede‐
tectrule.