Nortel Networks 2300 Series Last-resort-Automatically authenticates the user, Login to the Ssid

AP Commands 393

Table 24: Output for show service-profile (continued)

Field	Description
No broadcast	Indicates whether broadcast restriction is enabled. When this
	feature is enabled, WSS Software sends ARP requests and
	DHCP Offers and Acks as unicasts to their target clients instead
	of forwarding them as broadcasts.
Short retry limit	Number of times a radio serving the service-profile’s SSID can
	send a short unicast frame without receiving an acknowledgment.
Long retry limit	Number of times a radio serving the service-profile’s SSID can
	send a long unicast frame without receiving an acknowledgment.
	A long unicast frame is a frame that is equal to or longer than the
	RTS threshold.
Auth fallthru	Secondary (fallthru) encryption type when a user tries to
	authenticate but the WSS managing the radio does not have an
	authentication rule with a userwildcard that matches the
	username.
	• last-resort—Automatically authenticates the user
	and allows access to the SSID requested by the
	user, without requiring a username and password.
	• none—Denies authentication and prohibits the
	user from accessing the SSID.
	• web-portal—Redirects the user to a web page for
	login to the SSID.
Sygate On-Demand (SODA)	Whether SODA functionality is enabled for the service profile.
	When SODA functionality is enabled, connecting clients
	download SODA agent files, which perform security checks on
	the client.
Enforce SODA checks	Whether a client is allowed access to the network after it has
	downloaded and run the SODA agent security checks. When
	SODA functionality is enabled, and the WSS is configured to
	enforce SODA checks, then a connecting client must download
	the SODA agent files and pass the checks in order to gain access
	to the network.
SODA remediation ACL	The name of the ACL to be applied to the client if it fails the
	SODA agent checks. If no remediation ACL is specified, then a
	client is disconnected from the network if it fails the SODA agent
	checks.
Custom success web-page	The name of the user-specified page that the client loads upon
	successful completion of the SODA agent checks. If no page is
	specified, then the success page is generated dynamically.
Custom failure web-page	The name of the user-specified page that the client loads if it fails
	SODA agent checks. If no page is specified, then the failure page
	is generated dynamically.
Custom logout web-page	The name of the user-specified page that the client loads upon
	logging out of the network, either by closing the SODA virtual
	desktop, or by requesting the page. If no page is specified, then
	the client is disconnected without loading a logout page.

Nortel WLAN—Security Switch 2300 Series Command Line Reference