AP Commands 337

Access Enabled

History Introduced in WSS Software Version 4.1.

Usage When the SODA agent is enabled in a service profile, by default the SODA agent checks are downloaded to a client and run before the client is allowed on the network. You can use this command to disable the enforcement of the SODA security checks, so that the client is allowed access to the network immediately after the SODA agent is downloaded, rather than waiting for the security checks to be run.

When the enforce checks option is enabled, upon successful completion of the SODA agent checks, the client performs an HTTP Get operation to load the success page. Upon loading the success page, the client is granted access to the network.

In order for the client to load the success page, you must make sure the SODA agent is configured (through SODA Manager) with the correct URL of the success page, so that the WSS can serve the page to the client.

Similarly, you must make sure the SODA agent is configured with the correct URLs of the failure and logout pages, so that when the client requests these pages, the WSS can serve those pages as well.

Examples The following command allows network access to clients after they have downloaded the SODA agent, but without requiring that the SODA agent checks be completed:

WSS# set service-profile sp1 enforce-checks disable

success: change accepted.

See Also

set service-profile soda mode on page 329

show service-profile on page 380

set service-profile soda failure-page

Specifies a page on the WSS that is loaded when a client fails the security checks performed by the SODA agent.

Syntax set service-profile name soda failure-page page

name

Service profile name.

page

Page that is loaded if the client fails the security checks performed by the

 

SODA agent.

Defaults By default, the WSS dynamically generates a page indicating that the SODA agent checks have failed.

Access Enabled.

History Introduced in WSS Software Version 4.1.

Usage Use this command to specify a custom page that is loaded by the client when the SODA agent checks fail. After this page is loaded, the specified remediation ACL takes effect, or if there is no remediation ACL configured, then the client is disconnected from the network.

Nortel WLAN—Security Switch 2300 Series Command Line Reference

Page 337
Image 337
Nortel Networks 2300 Series Set service-profile soda failure-page, WSS# set service-profile sp1 enforce-checks disable