516 Configuring AAA for network users
NN47250-500 (320657-F Version 02.01)
Configuring last-resort access for wired authentication ports
To configure a wired authentication port to allow last-resort access:
• Set the fallthru authentication type on the port to last-resort.
• Create a user named last-resort-wired in the switch’s local database.
The following commands configure wired authentication port 5 for last-resort access and add the special user:
WSS# set port type wired-auth 5 auth-fall-thru last-resort
success: change accepted.
WSS# set user last-resort-wired attr vlan-name guest-vlan2
success: change accepted.
Configuring AAA for users of third-party APs
A WSS can provide network access for users associated with a third-party AP that has authenticated the users with
RADIUS. You can connect a third-party AP to a WSS and configure the WSS to provide authorization for clients who
authenticate and access the network through the AP. Figure 3 shows an example.
Figure 3. WSS serving as RADIUS proxy
WSS
Wired Layer 2
connection
RADIUS server
Layer 2
or Layer 3