Nortel Networks 2300 manual Third-Party AP Requirements, WSS Switch Requirements

Configuring AAA for Network Users 443

Requirements

Third-Party AP Requirements

•The third-party AP must be connected to the WSS switch through a wired Layer 2 link. WSS Software cannot provide data services if the AP and WSS are in different Layer 3 subnets.

•The AP must be configured as the WSS’s RADIUS client.

•The AP must be configured so that all traffic for a given SSID is mapped to the same 802.1Q tagged VLAN. If the AP has multiple SSIDs, each SSID must use a different tag value.

WSS Switch Requirements

•The WSS port connected to the third-party AP must be configured as a wired authentication port. If SSID traffic from the AP is tagged, the same VLAN tag value must be used on the wired authentication port.

•A MAC authentication rule must be configured to authenticate the AP.

•The WSS must be configured as a RADIUS proxy for the AP. The WSS is a RADIUS server to the AP but remains a RADIUS client to the real RADIUS servers.

•An authentication proxy rule must be configured for the AP’s users. The rule matches based on SSID and username, and selects the authentication method (a RADIUS server group) for proxying.

Nortel WLAN Security Switch 2300 Series Configuration Guide