436
C
21: C
HAPTER
ONFIGURING
Client associates with MAP radio
or requests access from wired authentication port
Client requests
encrypted SSID?
Yes
No
last-resort?
No
web?
No
none?
AAA
N
FOR
ETWORK
Figure 30 Authentication Flowchart for Network Users
802.1X rule that
matches SSID?
Yes
No
MAC rule that
matches SSID?
No
Use fallthru authentication
Last-resort rule that
matches SSID?
Yes
Web Auth rule that
matches SSID?
Yes
Refuse
Client
Yes
U
SERS
Client
responds
Yes
to 802.1X?
No
Yes
No
Refuse
Client
Yes
No
Refuse
Client
Authent.
Allow
succeeds?
Client
Yes
No
Refuse
Client
Authent.
Allow
succeeds?
Client
Yes
No
Authent.
Allow
succeeds? Yes
Client
No
Refuse
Client
Authent.
Allow
succeeds? Yes
Client
No
Refuse
Client