set service-profile auth-fallthru 297■ web-auth — Serves the user a web page from the WX switch’snonvolatile storage for login to the SSID.Defaults — The default fallthru authentication type is web-auth.If a username does not match a userglob in an authentication rule for theSSID requested by the user, the WX switch that is managing the radio theuser is connected to redirects the user to a web page located on the WXswitch. The user must type a valid username and password on the webpage to access the SSID.Access — Enabled.History — Introduced in MSS Version 3.0.Usage — The last-resort fallthru authentication type allows any user toaccess any SSID managed by the service profile. This method does notrequire the user to provide a username or password. Use the last-resortmethod only if none of the SSIDs managed by the service profile requiresecure access.The web-auth authentication type also requires the followingconfiguration items:■ Web AAA must be enabled (set web-auth enable command)■ Web page on the WX switch containing the radio the user is on whileattempting to access the SSID. The web page is called wba_form.html.If the WX switch contains a subdirectory named after the SSID theuser is requesting and that subdirectory contains a wba_form.htmlpage, that page is served to the user. Otherwise, the wba_form.htmlpage in the top-level directory is served.■ Authentication rule for the userglob that matches the username (setauthentication web command)■ Username and password configured in the local database (set usercommand) or on a RADIUS serverExamples — The following command sets the fallthru authentication forSSIDS managed by the service profile rnd_lab to none:WX4400# set service-profile rnd_lab auth-fallthru nonesuccess: change accepted.
