D-Link dws-1008 Switch User Manual


 
D-Link DWS-1008 CLI Manual 360
set service-profile auth-fallthru
Specifies the authentication type for users who do not match an 802.1X or MAC authentication
rule for an SSID managed by the service profile. When a user tries to associate with an SSID,
MSS checks the authentication rules for that SSID for a userglob that matches the username. If
the SSID does not have an authentication rule that matches the username, authentication for the
user falls through to the fallthru type.
The fallthru type is a service profile parameter, and applies to all radios within the radio profiles
that are mapped to the service profile.
Syntax: set service-profile name auth-fallthru {last-resort | none | web-portal}
last-resort
none
web-portal
Defaults: The default fallthru authentication type is none.
If a username does not match a userglob in an authentication rule for the SSID requested by the
user, the DWS-1008 that is managing the radio the user is connected to redirects the user to a
web page located on the DWS-1008. The user must type a valid username and password on the
web page to access the SSID.
Access: Enabled.
Usage The last-resort fallthru authentication type allows any user to access any SSID managed
by the service profile. This method does not require the user to provide a username or password.
Use the last-resort method only if none of the SSIDs managed by the service profile require
secure access.
The web-portal authentication type also requires additional configuration items.
Examples: The following command sets the fallthru authentication type for SSIDS managed by
Automatically authenticates the user and allows access to the SSID requested
by the user, without requiring a username and password.
Denies authentication and prohibits the user from accessing
the SSID.
Note: The fallthru authentication type none is different from the authentication
method none you can specify for administrative access. The fallthru authentication
type none denies access to a network user. In contrast, the authentication
method none allows access to the DWS-1008 by an administrator.
Serves the user a web page from the DWS-1008’s nonvolatile storage for secure
login to the network.