Specifications

set authentication mac

Chapter 9

AAA Commands

214

If you specify multiple authentication methods in the set authentication mac

command, UNIVERGE WL Control System applies them in the order in which

they appear in the command, with these results:

l If the first method responds with pass or fail, the evaluation is final.

l If the first method does not respond, UNIVERGE WL Control System tries

the second method, and so on.

l However, if local appears first, followed by a RADIUS server group,

UNIVERGE WL Control System ignores any failed searches in the local

UNIVERGE WL Controller database and sends an authentication request to

the RADIUS server group.

If the UNIVERGE WL Controller configuration contains a set authentication

mac command that matches the SSID the user is attempting to access and the user

MAC address, UNIVERGE WL Control System uses the method specified by the

command. Otherwise, UNIVERGE WL Control System uses local MAC

authentication by default.

If the username does not match an authentication rule for the SSID the user is

attempting to access, UNIVERGE WL Control System uses the fallthru

authentication type configured for the SSID, which can be last-resort,

web-portal (for Web Authentication), or none.

Examples

To use the local UNIVERGE WL Controller database to authenticate

all users who access the mycorp2 SSID by their MAC address, type the following

command:

PROMPT# set authentication ssid mycorp2 mac ** local

success: change accepted.