54
Section 3: Configuring the Access Point
LAPAC1750PRO Access Point Software User Manual
NOTE:
Global MAC Authentication settings apply to all VAPs on both radios.
Table 37: MAC Filtering
Field Description
Filter To set the MAC Address Filter, select one of the following
options:
• Allow only stations in the list. Any station that is not
in the stations list is denied access to the network
through the AP.
• Block all stations in list. Only the stations that appear in
the list are denied access to the network through the
AP. All other stations are permitted access.
Note: The filter you select is applied to the clients in the
stations list, regardless of whether that station list is local or
on the RADIUS server.
Stations List This is the local list of clients that are either permitted or
denied access to the network through the AP. To add a
MAC address to the local stations list, enter its 48-bit MAC
address into the lower text boxes, then click Add.
To remove a MAC address from the stations list, select its
48-bit MAC address, then click Remove.
The stations in the list will either be allowed or denied
access based on how you set the filter in the previous field.
The Access Point allows up to 512 MAC addresses to be
added to the station list.
Note: If MAC authentication for the VAP is set to Local,
the AP uses the stations list to permit or deny the clients
access to the network. If the MAC authentication type is set
to RADIUS, the AP ignores the MAC addresses configured
in this list and uses the list that is stored on the RADIUS
server. The MAC authentication type is set on the VAP page.
NOTE:
After you configure local MAC Authentication settings, you must click
Update to apply the changes and to save the settings. Changing some
settings might cause the AP to stop and restart system processes. If
this happens, wireless clients will temporarily lose connectivity. We
recommend that you change AP settings when WLAN traffic is low.
Configuring MAC Authentication on the
RADIUS Server
If you use RADIUS MAC authentication for MAC-based access control, you must
configure a station list on the RADIUS server. The station list contains client
MAC address entries, and the format for the list is described in the following
table.
Table 38: Configuring MAC Authentication on the RADIUS Server
RADIUS Server
Attribute
Description Value
User-Name (1) MAC address of the
client station.
Valid Ethernet
MAC address.
User-Password (2) A fixed global password used
to lookup a client MAC entry.
NOPASSWORD