Operation Manual
MP Access Point Commands
Mobility System Software Command Reference Guide
Version 7.3
12 – 288
SSID does not have an authentication rule that matches the username, authentication for the
user falls through to the fallthru type.
The fallthru type is a service profile parameter, and applies to all radios within the radio profiles
that are mapped to the service profile.
Syntax
set service-profile name [rsn-id | wpa-ie] auth-fallthru
{last-resort | none | web-portal}
Defaults
The default fallthru authentication type is none.
If a username does not match a userglob in an authentication rule for the SSID requested by the
user, the MX managing the radio that the user is connected to redirects the user to a Web page
located on the MX. The user must type a valid username and password on the Web page to access
the SSID.
Access
Enabled.
History
Usage
The last-resort fallthru authentication type allows any user to access any SSID managed
by the service profile. This method does not require the user to provide a username or password.
Use the last-resort method only if none of the SSIDs managed by the service profile require
secure access.
The web-portal authentication type also requires additional configuration items. (See the
“Configuring AAA for Network Users” chapter of the Trapeze Mobility System Software User’s
Guide.)
Examples
The following command sets the fallthru authentication type for SSIDS managed by the
service profile rnd_lab to web-portal:
MX# set service-profile rnd_lab auth-fallthru web-portal
success: change accepted.
See Also
● set web-portal on page 9-189
● set service-profile web-portal-form on page 12-316
● show service-profile on page 12-357
last-resort Automatically authenticates the user and allows access to the SSID
requested by the user, without requiring a username and password.
none Denies authentication and prohibits the user from accessing the SSID.
Note: The fallthru authentication type none is different from the authentication
method none you can specify for administrative access. The fallthru authentication
type none denies access to a network user. In contrast, the authentication method
none allows access to the MX by an administrator. (See “set authentication
admin” on page 9–164 and “set authentication console” on page 9–165.)
web-portal Serves the user a web page from the MX nonvolatile storage for secure login
to the network.
Version 1.0 Command introduced.
Version 4.0 Option for WebAAA fallthru authentication type changed from web-auth to
web-portal.
Default changed to none.