4-13
Q4: Why do I need to shorten the anti-jitter duration to validate the MAB perception-free authentication when both the
web-based authentication and MAB authentication are configured?
The anti-jitter solution for the web-based authentication is conflict with the MAB perception-free authentication solution. By
default, the anti-jitter duration of the web-based authentication is 5 minutes. After the STA gets offline and gets online again, if
the anti-jitter is still valid, the MAB perception-free authentication is not triggered. As a result, the MAB perception-free
authentication becomes invalid. By shortening the anti-jitter duration, after the STA gets offline, the STA on the AC gets offline
within a short period of time. When the STA gets online again, the MAB perception-free authentication can be triggered.
Q5: What are user name and password for MAB authentication?
The user name and password are MAC address of the STA, in lower case, without separators, for example, 00013a093213.
Q6: How to configure the non-anti-jitter for terminals that do not pass the web-based authentication?
Answer: You can use the command ac-controller prevent-jitter authed-only.
Q7: Why doesn't the global configuration for offline-detect take effect?
The priority of the offline-detect function in the wlansec mode is higher. By default, if a user does not have any traffic within 15
minutes, the system gets the user offline.
WS6108(config)#wlansec 7
WS6108(config-wlansec)#web-auth offline-detect ?
flow Configure no flow threshold
interval Configure no flow interval
Q8: How long is the default traffic detection time for web-based authentication?
Answer: The default duration is 15 minutes.
Q9: How to transmit the IP address to the Radius server in wireless 1X and MAB authentication modes?
The IP address is transmitted to the Radius server in a Radius-accounting packet (the first accounting packet). Previously,
when 1X and MAB authentication begins, the Radius accounting packets may be already sent out but STA may be yet to obtain
