Overriding Or Adding Attributes Locally With A Location Policy - Nortel 2300 Series Configuration Manual

You can also specify a combination of allowed encryption types by summing the values. For example, the following
command allows mac-fans to associate using either TKIP or WEP_104:
23x0# set mac-usergroup mac-fans attr encryption-type 12
success: change accepted.
To clear an encryption type from the profile of a use or group of users in the local WSS database, use one of the
following commands:
clear user username attr encryption-type
clear usergroup groupname attr encryption-type
clear mac-user username attr encryption-type
clear mac-usergroup groupname attr encryption-type
Assigning and Clearing Encryption Types on a RADIUS Server
To assign or delete an encryption algorithm as the Encryption-Type authorization attribute in a user or group record on a
RADIUS server, see the documentation for your RADIUS server.
Overriding or Adding Attributes Locally with a Location
Policy
During the login process, the AAA authorization process is started immediately after clients are authenticated to use the
WSS switch. During authorization, WSS Software assigns the user to a VLAN and applies optional user attributes, such
as a session timeout value and one or more security ACL filters.
A location policy is a set of rules that enables you to locally set or change authorization attributes for a user after the user
is authorized by AAA, without making changes to the AAA server. For example, you might want to enforce VLAN
membership and security ACL policies on a particular WSS based on a client's organization or physical location, or
assign a VLAN to users who have no AAA assignment. For these situations, you can configure the location policy on the
switch.
You can use a location policy to locally set or change the Filter-Id and VLAN-Name authorization attributes obtained
from AAA.
Nortel WLAN Security Switch 2300 Series Configuration Guide
Configuring AAA for Network Users 455