Specifications

About AAA for Network Users
RoamAbout Mobility System Software Configuration Guide 17-3
Authentication Algorithm
MSScantrymorethanoneoftheauthenticationtypesdescribedinAuthenticationTypesto
authenticateauser.MSStries802.1Xfirst.Iftheuser’sNICsupports802.1Xbutfails
authentication,MSSdeniesaccess.Otherwise,MSStriesMACauthenticationnext.IfMAC
authenticationissuccessful,MSSgrantsaccesstotheuser.
Otherwise,MSStriesthefallthru
authenticationtypespecified fortheSSIDorwiredauthenticationport.Thefallthru
authenticationtypecanbeoneofthefollowing:
•Web
• Last‐resort
• None
Webandlast‐resortaredescribedinAuthenticationTypes.Nonemeanstheuserisautomatically
deniedaccess.Thefallthruauthenticationtypeforwirelessaccess
isassociatedwiththeSSID
(throughaserviceprofile).Thefallthruauthenticationtypeforwiredauthenticationaccessis
specifiedwiththewiredauthenticationport.(Forinformationaboutserviceprofiles,see“Service
Profiles”onpage 9‐14.Forinformationaboutwiredauthenticationportconfiguration,see
“SettingaPortforaWired
AuthenticationUser”onpage 4‐3.)
Figure 17‐1onpage 17‐4showshowMSStriestheauthenticationtypes.
Note: The fallthru authentication type None is different from the authentication method none you
can specify for administrative access. The fallthru authentication type None denies access to a
network user. In contrast, the authentication method none allows access to the RoamAbout switch
by an administrator. (See Chapter 3, Configuring AAA for Administrative and Local Access.)