Configuring Last-Resort Access - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

Configuring Last-Resort Access

Users who are not authenticated and authorized by 802.1X methods or a MAC address can gain limited
access to the network as guest users. You can configure an SSID to allow anonymous guest access, by
setting its fallthru authentication type to last-resort. The authorization attributes assigned to last-resort
users come from the default authorization attributes set on the SSID.
To configure an SSID to allow last-resort access:
• Set the SSID name, if not already set.
• Set the fallthru access type of the SSID's service profile to last-resort.
• Set the vlan-name and other authorization attributes on the SSID's service profile.
• If the SSID type will be crypto (the default), configure encryption settings.
You do not need to configure an access rule for last-resort access. Last-resort access is automatically
enabled on all service profiles and wired authentication ports that have the fallthru authentication type
set to last-resort.
The authentication method for last-resort is always local. MSS does not use RADIUS for last-resort
authentication.
The following commands configure last-resort access for SSID guest-wlan. The service profile is
configured to encrypt user traffic on the SSID using 40-bit dynamic WEP, WPA, or RSN, depending on
the client's configuration.
DWS-1008# set service-profile last-resort-srvcprof ssid-name guest-wlan
success: change accepted.
DWS-1008# set service-profile last-resort-srvcprof auth-fallthru last-resort
success: change accepted.
DWS-1008# set service-profile last-resort-srvcprof attr vlan-name guest-vlan
success: change accepted.
DWS-1008# set service-profile last-resort-srvcprof rsn-ie enable
success: change accepted.
DWS-1008# set service-profile last-resort-srvcprof wpa-ie enable
success: change accepted.
DWS-1008# set service-profile last-resort-srvcprof cipher-ccmp enable
success: change accepted.
DWS-1008# set service-profile last-resort-srvcprof cipher-wep40 enable
success: change accepted.
D-Link DWS-1008 User Manual 0