588 Configuring AAA for network users
NN47250-500 (Version 03.01)
Configuring last-resort access for wired authentication ports
To configure a wired authentication port to allow last-resort access:
• Set the fallthru authentication type on the port to last-resort.
• Create a user named last-resort-wired in the switch’s local database.
The following commands configure wired authentication port 5 for last-resort access and add the special user:
WSS# set port type wired-auth 5 auth-fall-thru last-resort
success: change accepted.
WSS# set user last-resort-wired attr vlan-name guest-vlan2
success: change accepted.
Configuring AAA for users of third-party APs
A WSS can provide network access for users associated with a third-party AP that has authenticated the users
with RADIUS. You can connect a third-party AP to a WSS and configure the WSS to provide authorization
for clients who authenticate and access the network through the AP. Figure 34 shows an example.
Figure 34. WSS serving as RADIUS proxy
WSS
Wired Layer 2
connection
RADIUS server
Layer 2
or Layer 3