Specifications

set authentication web

Chapter 9

AAA Commands

216

You can configure a rule either for wireless access to an SSID. If the rule is for

wireless access to an SSID, specify the SSID name or specify any to match on all

SSID names.

If you specify multiple authentication methods in the set authentication web

command, UNIVERGE WL Control System applies them in the order in which

they appear in the command, with these results:

l If the first method responds with pass or fail, the evaluation is final.

l If the first method does not respond, UNIVERGE WL Control System tries

the second method, and so on.

l However, if local appears first, followed by a RADIUS server group,

UNIVERGE WL Control System overrides any failed searches in the local

UNIVERGE WL Controller database and sends an authentication request to

the server group.

UNIVERGE WL Control System uses a Web Authentication rule only under the

following conditions:

l The client is not denied access by 802.1X or does not support 802.1X.

l The client MAC address does not match a MAC authentication rule.

l The fallthru type is web-portal. (For a wireless authentication rule, the

fallthru type is specified by the set service-profile auth-fallthru command.)

Examples

The following command configures a Web Authentication rule in the

local UNIVERGE WL Controller database for SSID ourcorp and userglob rnd*:

PROMPT# set authentication web ssid ourcorp rnd* local

success: change accepted.