544 Configuring AAA for network users

NN47250-500 (Version 03.01)

Figure 32. Authentication flowchart for wireless network users

last-resort?
web?
none?
Client associates with Nortel radio
or requests access from wired authentication port
Use fallthru authentication
Ye s
No
Ye s
Ye s
Ye s
Ye s
No
Ye s
Ye s
No
No
No
No
Client requests
encrypted SSID?
Client
802.1X rule that
matches SSID? responds
Ye s
MAC rule that
matches SSID?
No
to 802.1X?
Authent.
succeeds?
Allow
Client
Ye s
Authent.
succeeds?
Allow
Client
Ye s
Allow
Client
Refuse
Client
Refuse
Client
Last-resort rule that
matches SSID?
Web Auth rule that
matches SSID?
No
Refuse
Client
No
Authent.
succeeds? Ye s
No
Refuse
Client
No
Refuse
Client
Allow
Client
Authent.
succeeds? Ye s
No
Refuse
Client