User authentication, accounts, and addressing
MAC-based authentication
10-15
MAC authentication can be configured at several different levels as described in the following
table.
Global VSC Switch port
Authentication is handled by the
controller.
Authentication is handled by either
the controller or the AP. (Depends
on how the VSC is configured.)
Authentication is handled by the
MSM317.
Applies to both wireless and wired
users.
Applies to wireless users if the VSC
is configured for either
Authentication and/or Access
control. If neither are configured,
applies to both wireless and wired
users.
Applies to wired users only.
Settings apply globally to all VSCs,
except for the authentication server
which is defined on a per-VSC basis.
Settings are defined on a per-VSC
basis.
Settings are defined on a per-port
basis.
Can only be used on access-
controlled VSCs that have HTML-
based user logins enabled.
Can be used on non-access-
controlled VSCs, or on access-
controlled VSCs that have HTML-
based user logins disabled.
Can only be used when the switch
port is not bound to a VSC.
Configured using a RADIUS
attribute or local public access
attribute.
Configured using the Add/Edit
Virtual Service Community
configuration page in the
management tool.
Configured by selecting Controlled
APs > [MSM317-AP] >>
Configuration > Switch ports >
[switch-port] in the management
tool.
User credentials can be validated
using:
Local user accounts on the
controller
External RADIUS server
Active Directory
User credentials can be validated
using:
Local user accounts on the
controller
External RADIUS server
(Depends on how the VSC is
configured.)
User credentials can be validated
using:
External RADIUS server
See Configuring global MAC-based
authentication on page 10-16.
See Configuring MAC-based
authentication on a VSC on
page 10-17.
See Configuring MAC-based
authentication on an MSM317
switch port on page 10-19.
To Next Page
Loading...
Need help?
General
