440 Configuring AAA for Network Users320657-AWhen user djoser is successfully authenticated and authorized, WSS Software redirects the user to thefollowing URL:https://saqqara.org/login.php?user=djoserTo verify configuration of a redirect URL and other user attributes, type the show aaa command.Configuring Last-Resort AccessUsers who are not authenticated and authorized by 802.1X methods or a MAC address can gain limited accessto the network as guest users. You can optionally configure a special username called last-resort-wired (forwired authentication access) or last-resort-ssid, where ssid is the SSID requested by the user. To match on thewildcard SSID name any, configure user last-resort-any, exactly as spelled here.To configure a last-resort authentication rule, use the following command:set authentication last-resort {ssid ssid-name | wired}method1 [method2] [method3] [method4]For example, to enable wireless users who request SSID guestssid to join the network on VLAN k3, type thefollowing commands:23x0# set authentication last-resort ssid guestssid localsuccess: change accepted23x0# set user last-resort-guestssid attr vlan-name k3success: change acceptedNote. Although WSS Software allows you to configure a user password for a last-resortuser, the password has no effect. Last-resort users can never access an WSS inadministrative mode and never require a password when authorized locally. However, if thelast-resort user is authorized on a RADIUS server, the server might require a password. Inthis case, use the authorization password set on the WSS switch, which is Nortel bydefault.Note. The fallthru authentication type must be set to last-resort. Otherwise, last-resortaccess is disabled. The default fallthru authentication type for wireless access to an SSID isweb. The default for wired authentication access is none. (To change the fallthruauthentication type for an SSID, see “Changing the Fallthru Authentication Type” onpage 265. To change it for a wired authentication port, see “Setting a Port for a WiredAuthentication User” on page 76.
