Nortel 6220 User Manual page 85

administrator decides whether there will be more or less (or no)
authentication on an interface-by-interface basis.
For example, an administrator can permit MAC addresses entered as part
of the ACL only on 802.11, but can permit MAC addresses entered
through RADIUS Setup for both the Ethernet and 802.11 interfaces.
The modules are checked in the order in which they appear on the
Advanced Authentication Setup screen, and the options that have been
selected (checked) determine how authentication is carried out.
Assuming that all options are selected, the first method used is the
Access Control List, followed by MAC Address Radius, followed by
802.1x authentication. If no options are selected, then no authentication
takes place. Zero to three of the modules can be enabled, but at least one
module must be enabled for advanced authentication to take place.
The process by which authentication takes place is as follows:
The first module in the list (for example, ACL) checks the source
address of the incoming packet to see if it is permitted to send
packets on the selected interfaces.
The module will designate the address as one of the following:
• Permit -- the MAC address is permitted on this interface, and
• Deny - the MAC address is denied on this interface, and the
• Unknown - the MAC address is not known on this interface, and
If the designation is unknown, then it is passed to the next module in
the list (for example, from the ACL to MAC RADIUS
Authentication), and the process starts again.
Ensure that the MAC Address RADIUS Authentication checkbox is
enabled, and then click the Setup button. The Authentication Module
Setup screen is displayed as shown below.
Note: The number of tabs displayed on this screen will vary depending
on which Advanced Authentication options you have selected on the
Advanced Authentication Setup screen. In the screenshot below, all
Advanced Authentication options have been enabled.
WLAN Cable Access Point 6220 CSU NTPM99CA Rel 2.0 Issue 5 Dec 2005
packets are forwarded
packets are not sent
is passed to the next authentication module
87