Authentication Algorithm - Nortel 2360 Configuration Manual

Authentication algorithm

WSS Software can try more than one of the authentication types described in
user. WSS Software tries 802.1X first. If the user's NIC supports 802.1X but fails authentication, WSS Software denies
access. Otherwise, WSS Software tries MAC authentication next. If MAC authentication is successful, WSS Software
grants access to the user. Otherwise, WSS Software tries the fallthru authentication type specified for the SSID or wired
authentication port. The fallthru authentication type can be one of the following:
• Web
• Last-resort
• None
Web and last-resort are described in
access. The fallthru authentication type for wireless access is associated with the SSID (through a service profile). The
fallthru authentication type for wired authentication access is specified with the wired authentication port. (For informa-
tion about service profiles, see
configuration, see "Setting a port for a wired authentication user" (page
Note.
The fallthru authentication type None is different from the authentication method
none you can specify for administrative access. The fallthru authentication type None
denies access to a network user. In contrast, the authentication method none allows
access to the WSS by an administrator. (See
administrative and local access" (page
Figure 1 shows how WSS Software tries the authentication types for wireless access. (The authentication process is
similar for access through a wired authentication port, except last-resort access requires a last-resort-wired user.)
"Authentication types" (page
"Service profiles" (page 220). For information about wired authentication port
69).)
Nortel WLAN—Security Switch 2300 Series Configuration Guide
Configuring AAA for network users 469
"Authentication types"
468). None means the user is automatically denied
92).)
"Configuring Web-based AAA for
to authenticate a