Overview
20-12
20.1.9 client
Wireless Configuration Commands
Use this command to configure a wireless client. This command creates an exclude-list or include list. Creating
an exclude list or include list takes the user to a new mode called "
config-wireless-client-list". Refer
to config-wireless-client-list on page 20-13 for a
(config-wireless-client-list) command summary.
Syntax
client [exclude-list|include-list](listname)
Parameters
Usage Guidelines
Use the configurations described below to:
• Create an exclude list.
RFS7000(config-wireless)#client exclude-list protected-hosts
RFS7000(config-wireless-client-list)#
• Add a host entry into the exclude list.
RFS7000(config-wireless-client-list)# station printers
00:00:AA:DD:EE:11/00:00:FF:DD:EE:11
RFS7000(config-wireless-client-list)# station testing-host1
00:11:AA:03:1B:FE
• Associate the exclude list to WLAN.
RFS7000(config-wireless-client-list)# wlan 1
• Configure RADIUS server parameters.
RFS7000(config-wireless)# wlan 1 nac-server primary 192.168.0.1
RFS7000(config-wireless)# wlan 1 nac-server primary radius-key 0 testing
RFS7000(config-wireless)# wlan 1 nac-server secondary 192.168.1.1
RFS7000(config-wireless)# wlan 1 nac-server secondary radius-key 0
testing123
• Enable NAC mode for WLAN.
RFS7000(config-wireless)# wlan 1 nac-mode do-nac-except-exclude-list
• Undo the above configuration.
RFS7000(config-wireless)# client exclude-list protected-hosts
RFS7000(config-wireless-client-client)# no station testing-host1
RFS7000(config-wireless)# no client exclude-list protected-hosts
RFS7000(config-wireless)# no wlan 1 nac-server primary
RFS7000(config-wireless)# no wlan 1 nac-server primary radius-key
RFS7000(config-wireless)# no wlan 1 nac-server secondary
exclude-list Wireless Client exclude list configuration. A MU NAC check is done except for
those in the exclude-list. So, devices in the exclude-list will not have any NAC
checks done.
include-list Wireless Client include list configuration. No MU NAC check is done except for
those in include-list. So, devices in include-list will have NAC checks done.
listname Wireless Client exclude/include list name.