470 Configuring AAA for network users
NN47250-500 (320657-F Version 02.01)
Figure 1. Authentication flowchart for wireless network users
last-resort?
web?
none?
Client associates with Nortel radio
or requests access from wired authentication port
Use fallthru authentication
Ye s
No
Ye s
Ye s
Ye s
Ye s
No
Ye s
Ye s
No
No
No
No
Client requests
encrypted SSID?
Client
802.1X rule that
matches SSID?
responds
Ye s
MAC rule that
matches SSID?
No
to 802.1X?
Authent.
succeeds?
Allow
Client
Ye s
Authent.
succeeds?
Allow
Client
Ye s
Allow
Client
Refuse
Client
Refuse
Client
Last-resort rule that
matches SSID?
Web Auth rule that
matches SSID?
No
Refuse
Client
No
Authent.
succeeds?
Ye s
No
Refuse
Client
No
Refuse
Client
Allow
Client
Authent.
succeeds?
Ye s
No
Refuse
Client