Software User Manual D-Link UAP
12/10/09
34CSFP6XXUAP-SWUM100-D13 Controlling Access by MAC Authentication Page 61
Table 23 describes the fields and configuration options available on the MAC Authentication page
CONFIGURING MAC AUTHENTICATION ON THE RADIUS SERVER
If you use RADIUS MAC authentication for MAC-based access control, you must configure a station list on the RADIUS
server. The station list contains client MAC address entries, and the format for the list is described in the following table.
Note: Global MAC Authentication settings apply to all VAPs on both radios.
Table 23: MAC Authentication
Field Description
Filter To set the MAC Address Filter, select one of the following options:
• Allow only stations in the list. Any station that is not in the Stations List is denied access to the
network through the AP.
• Block all stations in list. Only the stations that appear in the list are denied access to the
network through the AP. All other stations are permitted access.
Note:
The filter you select is applied to the clients in the station list, regardless of whether that
station list is local or on the RADIUS server.
Stations List This is the local list of clients that are either permitted or denied access to the network through the
AP. To add a MAC Address to the local Stations List, enter its 48-bit MAC address into the lower text
boxes, then click Add.
To remove a MAC Address from the Stations List, select its 48-bit MAC address, then click Remove.
The stations in the list will either be allowed or denied access based on how you set the filter in the
previous field.
Note:
If the MAC authentication type for the VAP is set to Local, the AP uses the Stations List to
permit or deny the clients access to the network. If the MAC authentication type is set to RADIUS,
the AP ignores the MAC addresses configured in this list and uses the list that is stored on the
RADIUS server. The MAC authentication type is set on the VAP configuration page.
Note: After you configure local MAC Authentication settings, you must click Apply to apply the changes and to
save the settings. Changing some settings might cause the AP to stop and restart system processes. If this
happens, wireless clients will temporarily lose connectivity. We recommend that you change AP settings when
WLAN traffic is low.
Table 24: RADIUS Server Attributes for MAC Authentication
RADIUS Server Attribute Description Value
User-Name (1) MAC address of the client station. Valid Ethernet MAC
Address.
User-Password (2) A fixed global password used to lookup a client MAC entry. NOPASSWORD
To Next Page
Loading...
