Nortel Networks 2300 manual Configuring AAA for Network Users, About AAA for Network Users

401

Configuring AAA for Network Users

About AAA for Network Users	401
AAA Tools for Network Users	410
Configuring 802.1X Authentication	417
Configuring Authentication and Authorization by MAC Address	425
Configuring Web-based AAA	428
Configuring Last-Resort Access	440
Configuring AAA for Users of Third-Party APs	441
Assigning Authorization Attributes	446
Overriding or Adding Attributes Locally with a Location Policy	455
Configuring Accounting for Wireless Network Users	460
Displaying the AAA Configuration	464
Avoiding AAA Problems in Configuration Order	465
Configuring a Mobility Profile	468
Network User Configuration Scenarios	469

About AAA for Network Users

Network users include the following types of users:

•Wireless users—Users who access the network by associating with an SSID on a Nortel radio.

•Wired authentication users—Users who access the network over an Ethernet connection to an WSS switch port that is configured as a wired authentication (wired-auth) port.

You can configure authentication rules for each type of user, on an individual SSID or wired authentication port basis. WSS Software authenticates users based on user information on RADIUS servers or in the WSS switch’s local database. The RADIUS servers or local database authorize successfully authenticated users for specific network access, including VLAN membership. Optionally, you also can configure accounting rules to track network access information.

The following sections describe the WSS Software authentication, authorization, and accounting (AAA) features in more detail.

Nortel WLAN Security Switch 2300 Series Configuration Guide