Hub/Switch Reference Guide

AP Commands 393
Nortel WLAN—Security Switch 2300 Series Command Line Reference
No broadcast Indicates whether broadcast restriction is enabled. When this
feature is enabled, WSS Software sends ARP requests and
DHCP Offers and Acks as unicasts to their target clients instead
of forwarding them as broadcasts.
Short retry limit Number of times a radio serving the service-profile’s SSID can
send a short unicast frame without receiving an acknowledgment.
Long retry limit Number of times a radio serving the service-profile’s SSID can
send a long unicast frame without receiving an acknowledgment.
A long unicast frame is a frame that is equal to or longer than the
RTS threshold.
Auth fallthru Secondary (fallthru) encryption type when a user tries to
authenticate but the WSS managing the radio does not have an
authentication rule with a userwildcard that matches the
username.
• last-resort—Automatically authenticates the user
and allows access to the SSID requested by the
user, without requiring a username and password.
• none—Denies authentication and prohibits the
user from accessing the SSID.
• web-portal—Redirects the user to a web page for
login to the SSID.
Sygate On-Demand (SODA) Whether SODA functionality is enabled for the service profile.
When SODA functionality is enabled, connecting clients
download SODA agent files, which perform security checks on
the client.
Enforce SODA checks Whether a client is allowed access to the network after it has
downloaded and run the SODA agent security checks. When
SODA functionality is enabled, and the WSS is configured to
enforce SODA checks, then a connecting client must download
the SODA agent files and pass the checks in order to gain access
to the network.
SODA remediation ACL The name of the ACL to be applied to the client if it fails the
SODA agent checks. If no remediation ACL is specified, then a
client is disconnected from the network if it fails the SODA agent
checks.
Custom success web-page The name of the user-specified page that the client loads upon
successful completion of the SODA agent checks. If no page is
specified, then the success page is generated dynamically.
Custom failure web-page The name of the user-specified page that the client loads if it fails
SODA agent checks. If no page is specified, then the failure page
is generated dynamically.
Custom logout web-page The name of the user-specified page that the client loads upon
logging out of the network, either by closing the SODA virtual
desktop, or by requesting the page. If no page is specified, then
the client is disconnected without loading a logout page.
Table 24: Output for show service-profile (continued)
Field Description