Nortel Networks 2300 manual Assigning and Clearing Encryption Types on a Radius Server

Configuring AAA for Network Users 455

You can also specify a combination of allowed encryption types by summing the values. For example, the following command allows mac-fansto associate using either TKIP or WEP_104:

23x0# set mac-usergroup mac-fans attr encryption-type 12

success: change accepted.

To clear an encryption type from the profile of a use or group of users in the local WSS database, use one of the following commands:

clear user username attr encryption-type

clear usergroup groupname attr encryption-type clear mac-user username attr encryption-type clear mac-usergroup groupname attr encryption-type

Assigning and Clearing Encryption Types on a RADIUS Server

To assign or delete an encryption algorithm as the Encryption-Type authorization attribute in a user or group record on a RADIUS server, see the documentation for your RADIUS server.

Overriding or Adding Attributes Locally with a Location Policy

During the login process, the AAA authorization process is started immediately after clients are authenticated to use the WSS switch. During authorization, WSS Software assigns the user to a VLAN and applies optional user attributes, such as a session timeout value and one or more security ACL filters.

A location policy is a set of rules that enables you to locally set or change authorization attributes for a user after the user is authorized by AAA, without making changes to the AAA server. For example, you might want to enforce VLAN membership and security ACL policies on a particular WSS based on a client’s organization or physical location, or assign a VLAN to users who have no AAA assignment. For these situations, you can configure the location policy on the switch.

You can use a location policy to locally set or change the Filter-Id and VLAN-Name authorization attributes obtained from AAA.

Nortel WLAN Security Switch 2300 Series Configuration Guide