Enterasys RoamAbout RBT-4102 - Page 117

Security
RoamAbout RBT-4102 Wireless Access Point Configuration Guide 4-81
IfyouspecifyRADIUSMACforthisdefaultinterfaceorVAP,youmustspecifythefollowing
parameters:
– MACAuthenticationPasswordspecifiestheauthenticationpasswordthisradiointerfaceor
VAPsendstotheRADIUSservertoauthenticateMACaddresses.
– MACAuthenticationSessionTimeoutspecif iestheamountoftimeafterwhichyou
wanta
MACauthenticationsessiontotimeoutbetweentheAPandtheRADIUSserver.
IfyouspecifyLocalMACforthisdefaultinterfaceorVAP,youmust specifyLocalMAC
AuthenticationsettingsthatconfigurethelocalMACauthenticationdatabase.TheMAC
databaseprovidesamechanismtotakecert ainactionsbasedon
awirelessclient’sMAC
address.YoucanconfigureTheMAClistcanbeconfiguredtoallowordenynetworkaccessto
specificclients.
– SystemDefaultspecifiesadefaultactionforallunknownMACaddresses(thatis,thosenot
listedinthelocalMACdatabase).
‐ DenyblocksaccessforallMAC
addressesexceptthoselistedinthelocaldatabaseas
“A l l o w ” .
‐ AllowpermitsaccessforallMACaddressesexceptthoselistedinthelocaldatabaseas
“Deny”.
– LocalMACFilterSettingsaddsMACaddressesandpermissionsintothelocalMAC
database.
‐ MACAddressisthephysicaladdressofaclient.Entersix
pairsofhexadecimaldigits
separatedbyhyphens;forexample,00‐01‐F4‐12‐AB‐89.
‐ PermissionspecifieswhethertoallowordenyaccesstothisMACaddress.Allow
permitsaccess;Denyblocksaccess;DeleteremovesthespecifiedMACaddressentry
fromthedatabase.
‐ UpdateentersthespecifiedMACaddressand
permissionsettingintothelocal
database.
‐ MACAuthenticationTabledisplayscurrententriesinthelocalMACdatabase.