Configuration manual

Configuring Authentication
Fixed Switch Configuration Guide 10-17
Optionally Enable Guest Network Privileges
With PWA enhanced mode enabled, you can optionally configure guest networking privileges.
Guest networking allows an administrator to specify a set of credentials that will, by default,
appear on the PWA login page of an end station when a user attempts to access the network.
When enhanced mode is enabled, PWA will use a guest password and guest user name to grant
network access with default policy privileges to users without established login names and
passwords.
In order to configure guest networking privileges, you need to set the guest status, user name, and
password. You can set guest status for no authentication, RADIUS authentication, or disabled.
When you set guest status to no authentication, guest status is provided with its associated policy,
but no authentication takes place. When you set guest status to RADIUS authentication, guest
status is provided only after a successful authentication takes place. If guest networking status is
disabled, all supplicants must be authenticated with a valid user name and password at the login
page.
Table 10-2 describes how to optionally enable guest networking privileges.
Configuring MultiAuth Authentication
Configuring MultiAuth authentication consists of:
• Setting MultiAuth authentication mode setting
• Setting MultiAuth authentication precedence settings
• Setting MultiAuth authentication port properties
• Setting MultiAuth authentication idle timeout values
• Setting MultiAuth authentication session timeout values
Setting MultiAuth Authentication Mode
MultiAuth authentication mode can be set to MultiAuth or strict 802.1X single user mode. Set
MultiAuth authentication to MultiAuth when multiple users need to be authenticated for 802.1X
or in all cases for MAC and PWA authentication.
Procedure 10-4 describes setting the MultiAuth authentication mode.
Table 10-2 PWA Guest Networking Privileges Configuration
Task Command(s)
Set a guest user name for PWA networking. PWA will use
this name to grant network access to guests without
established login names and passwords.
set pwa guestname name
Set a guest user password for PWA networking. PWA will
use this password and the guest user name to grant
network access to guests without established login names
and passwords.
set pwa guestpassword
Optionally enable guest status without authentication set pwa gueststatus authnone
Optionally enable guest status with authentication. set pwa gueststatus authradius
Optionally disable guest status set pwa gueststatus disable