Alcatel-Lucent AOS-W 6.5.3.x - Page 286

286| 802.1X Authentication AOS-W 6.5.3.x| User Guide
10.Click on the WLAN-01_second-floor virtual AP profile name in the Profiles list or in Profile Details to
display the configuration parameters.
a. Ensure that you select Virtual AP enable.
b. For VLAN, select 61.
c. Click Apply.
In the CLI
(host)(config) #wlan ssid-profile WLAN-01
essid WLAN-01
opmode wpa-tkip
(host)(config) #wlan virtual-ap WLAN-01_first-floor
vlan 60
aaa-profile aaa_dot1x
ssid-profile WLAN-01
(host)(config) #wlan virtual-ap WLAN-01_second-floor
vlan 61
aaa-profile aaa_dot1x
sid-profile WLAN-01
(host)(config) #ap-group first-floor
virtual-ap WLAN-01_first-floor
(host)(config) #ap-group second-floor
virtual-ap WLAN-01_second-floor
Configuring Mixed Authentication Modes
Use l2-auth-fail-through command to perform mixed authentication which includes both MAC and 802.1X
authentication. When MAC authentication fails, enable the l2-auth-fail-through command to perform
802.1X authentication.
By default the l2-auth-fail-through command is disabled.
Authentication 1 2 3 4 5 6
MAC
authentication
Success Success Success Fail Fail Fail
802.1X
authentication
Success Fail — Success Fail —
Association dynamic-
wep
No
Association
static-
wep
dynamic-
wep
No
Association
static-
wep
Role Assignment 802.1X — MAC 802.1X — logon
Table 75: Mixed Authentication Modes
Table 75 describes the different authentication possibilities
In the CLI
(host)(config) #aaa profile test
l2-auth-fail-through