Configuring Authentication, Authorization, and Accounting Parameters 295Nortel WLAN—Management Software 2300 Series Reference GuideViewing and Configuring MAC Network AccessRulesMAC network access rules allow users onto the network by authenticating their MAC addresses instead oftheir user names.During log on, if the username does not match an 802.1X authentication rule, but the MAC address of theuser’s NIC or Voice-over-IP (VoIP) phone and the SSID (if wireless) do match a MAC authentication rule,WSS Software checks the RADIUS server group or local database for matching user information. If the MACaddress (and password, if on a RADIUS server) matches, WSS Software grants access. Otherwise, WSSSoftware attempts the fallthru authentication type, which can be Web, Open Access (last-resort), or none.This section assumes that you are familiar with the AAA options in WSS Software. For detailed information,see the “Configuring AAA for Network Users” chapter of the Nortel WLAN Security Switch 2300 SeriesConfiguration Guide.Viewing MAC Network Access Rules1 Select the Configuration tool bar option.2 In the Organizer panel, click the plus sign next to the WSS.3 Click the plus sign next to AAA.4 Select MAC Access Rules.The configured MAC network access rules appear.Creating a MAC Network Access Rule1 Access the Create MAC Network Access wizard:a Select the Configuration tool bar option.b In the Organizer panel, click the plus sign next to the WSS.c Click the plus sign next to AAA.d Select MAC Access Rules.e In the Task List panel, select MAC Network Access.2 Specify whether the rule is for wireless access to an SSID or access through a wiredauthentication port:• If the rule is for access to an SSID, do one of the following:• To match on any SSID name, leave the value any in the SSID box.• To match only on a specific SSID name, select or type the name in the SSID box.• If the rule is for access through a wired authentication port, select Wired.
