Nortel Networks 2300 Switch User Manual


 
Configuring AAA for network users 511
Nortel WLAN—Security Switch 2300 Series Configuration Guide
Using an ACL other than
portalacl
By default, when you set the fallthru authentication type on a service profile or wired authentication port to web-portal,
WSS Software creates an ACL called portalacl. WSS Software uses the portalacl ACL to filter Web-Portal user traffic
while users are being authenticated.
To use another ACL:
1 Create a new ACL and add the first rule contained in portalacl:
set security acl ip portalacl permit udp 0.0.0.0
255.255.255.255 eq 68 0.0.0.0 255.255.255.255 eq 67
set security acl ip portalacl deny 0.0.0.0 255.255.255.255
capture
2 Add the additional rules required for your application. For example, if you want to redirect users to a
credit card server, add the ACEs to do so.
3 Add the last rule contained in portalacl:
set security acl ip portalacl deny 0.0.0.0 255.255.255.255
capture
4 Verify the new ACL configuration, before committing it to the configuration, using the following
command:
show security acl info [acl-name | all] [editbuffer]
5 Commit the new ACL to the configuration, using the following command:
commit security acl
6 Change the Web-Portal ACL name set on the service profile, using the following command:
set service-profile name web-portal-acl aclname
7 Verify the change by displaying the service profile.
8 Save the configuration changes.