Specifications

11-82 Access Point Commands
set service-profile auth-fallthru
Specifiestheauthenticationtypeforuserswhodonotmatchan802.1XorMACauthentication
ruleforanSSIDmanagedbytheserviceprofile.WhenausertriestoassociatewithanSSID,MSS
checkstheauthenticationrulesforthatSSIDforauserglobthatmatchestheusername.IftheSSID

doesnothaveanauthentication rule thatmatchestheusername,authenticationfortheuserfalls
throughtothefallthrutype.
Thefallthrutypeisaserviceprofileparameter,andappliestoallradioswithintheradioprofiles
thataremappedtotheserviceprofile.
Syntax
set service-profile name auth-fallthru {last-resort | none | web-portal}
Parameters
Defaults
Thedefaultfallthrua uthenticationtypeisnone.
IfausernamedoesnotmatchauserglobinanauthenticationrulefortheSSIDrequestedbythe
user,theRoamAboutswitchthatismanagingtheradiotheuserisconnectedtoredirectstheuser
toawebpagelocate dontheRoamAbout
switch.Theusermusttypeavalidusernameand
passwordonthewebpagetoaccesstheSSID.
Mode
Enabled.
Usage
Thelast‐resortfallthruauthenticationtypeallowsanyusertoaccessanySSIDmanagedbythe
serviceprofile.Thismethoddoesnotrequiretheusertoprovideausernameorpassword.Usethe
last‐resortmethodonlyifnoneoftheSSIDsmanagedbytheserviceprofilerequiresecureaccess.
The
web‐portalauthenticationtypealsorequiresadditionalconfigurationitems.(Seethe
“ConfiguringAAAforNetworkUsers”chapteroftheRoamAboutMobilitySystemSoftware
ConfigurationGuide.)
last‐resort AutomaticallyauthenticatestheuserandallowsaccesstotheSSID
requestedbytheuser,withoutrequiringausernameandpassword.
none Deniesauthenticationandprohibits
theuserfromaccessingtheSSID.
Note: The fallthru authentication type none is different from the authentication
method none you can specify for administrative access. The fallthru authentication
type none denies access to a network user. In contrast, the authentication method
none allows access to the RoamAbout switch by an administrator. (Refer to “set
authentication admin” on page 8-27 and “set authentication console” on page 8-29.)
web‐portal ServestheuserawebpagefromtheRoamAboutswitch’snonvolatile
storageforsecurelogintothenetwork.