Set Authentication Proxy - Nortel 2300 Series Reference

200 AAA Commands
Usage You can configure different authentication methods for different groups of MAC addresses by
"wildcarding." (For details, see
page 12.)
If you specify multiple authentication methods in the set authentication mac command, WSS Software applies them in
the order in which they appear in the command, with these results:
• If the first method responds with pass or fail, the evaluation is final.
• If the first method does not respond, WSS Software tries the second method, and so on.
• However, if local appears first, followed by a RADIUS server group, WSS Software ignores any failed searches in
the local WSS database and sends an authentication request to the RADIUS server group.
If the switch's configuration contains a set authentication mac command that matches the SSID the user is attempting
to access and the user's MAC address, WSS Software uses the method specified by the command. Otherwise, WSS
Software uses local MAC authentication by default.
If the username does not match an authentication rule for the SSID the user is attempting to access, WSS Software uses
the fallthru authentication type configured for the SSID, which can be last-resort, web-portal (for Web-based AAA), or
none.
Examples To use the local WSS database to authenticate all users who access the mycorp2 SSID by their
MAC address, type the following command:
WSS# set authentication ssid mycorp2 mac ** local
success: change accepted.
See Also
• clear authentication mac on page 170
• set authentication admin on page 182
• set authentication console on page 183
• set authentication dot1x on page 185
• set authentication web on page 191
• show aaa on page 210

set authentication proxy

Configures a proxy authentication rule for a third-party AP's wireless users.
Syntax
set authentication proxy ssid ssid-name user-
ssid ssid-name
user-wildcard
radius-server-group
NN47250-100 (Version 02.51)
"User Wildcards, MAC Address Wildcards, and VLAN Wildcards" on
SSID name to which this authentication rule applies.
A single user or a set of users.
Specify a username, use the double-asterisk wildcard character (**) to
specify all usernames, or use the single-asterisk wildcard character (*) to
specify a set of usernames up to or following the first delimiter
character—either an at sign (@) or a period (.). (For details, see
Wildcards" on page 12.)
A group of RADIUS servers used for authentication.
radius-server-group
wildcard
"User