516 Configuring AAA for network users
Configuring last-resort access for wired authentication ports
To configure a wired authentication port to allow last-resort access:
•
Set the fallthru authentication type on the port to last-resort.
•
Create a user named last-resort-wired in the switch's local database.
The following commands configure wired authentication port 5 for last-resort access and add the special user:
WSS# set port type wired-auth 5 auth-fall-thru last-resort
success: change accepted.
WSS# set user last-resort-wired attr vlan-name guest-vlan2
success: change accepted.
Configuring AAA for users of third-party APs
A WSS can provide network access for users associated with a third-party AP that has authenticated the users with
RADIUS. You can connect a third-party AP to a WSS and configure the WSS to provide authorization for clients who
authenticate and access the network through the AP.
Figure 3.
WSS serving as RADIUS proxy
NN47250-500 (320657-F Version 02.01)
Figure 3
shows an example.
WSS
Wired Layer 2
connection
Layer 2
or Layer 3
RADIUS server