Proxim ORiNOCO AP-4000 - Page 216

Command Line Interface (CLI) AP-4000/4000M/4900M User Guide
Configuring the AP using CLI commands
216
Configure MAC Access Control
Setup MAC (Address) Access Control
[Device-Name]>set wifssidtbl <index> aclstatus enable/disable
[Device-Name]>set macacloptype <passthru, block>
[Device-Name]>reboot 0
Add an Entry to the MAC Access Control Table
[Device-Name]>set macacltbl 0 macaddr <MAC Address> status enable
[Device-Name]>show macacltbl
Disable or Delete an Entry in the MAC Access Control Table
[Device-Name]>set macacltbl <index> status <disable/delete>
[Device-Name]>show macacltbl
NOTE: For larger networks that include multiple Access Points, you may prefer to maintain this list on a centralized
location using the RADIUS parameters (see Set RADIUS Parameters).
Set RADIUS Parameters
Configure RADIUS Authentication servers
Perform the following command to configure a RADIUS Server and assign it to a VLAN. The RADIUS Server Profile
index is specified by the index parameter and the subindex parameter specifies whether you are configuring a primary or
secondary RADIUS server.
[Device-Name]>set radiustbl <Index> profname <Profile Name> seraddrfmt <1 - IP Address 2
- Name> sernameorip <IP Address or Name> port <value> ssecret <value> responsetm <value>
maxretx <value> acctupdtintrvl <value> macaddrfmt <value> authlifetm <value>
radaccinactivetmr <value> vlanid <vlan id -1 to 4094> status enable
NOTE: To create a new RADIUS profile, use 0 for <Index>.
Examples of Configuring Primary and Secondary RADIUS Servers and Displaying the RADIUS Configuration
Primary server configuration:
[Device-Name]>set radiustbl 1.1 profname "MAC Authentication" seraddrfmt 1 sernameorip
20.0.0.20 port 1812 ssecret public responsetm 3 maxretx 3 acctupdtintrvl 0 macaddrfmt 1
authlifetm 900 radaccinactivetmr 5 vlanid 22 status enable
Secondary server configuration:
[Device-Name]>set radiustbl 1.2 profname "MAC Authentication" seraddrfmt 1 sernameorip
20.0.0.30 port 1812 ssecret public responsetm 3 maxretx 3 acctupdtintrvl 0 macaddrfmt 1
authlifetm 900 radaccinactivetmr 5 vlanid 33 status enable
[Device-Name]>show radiustbl
Index : 1
Primary/Backup : Primary
Profile Name : MAC Authentication
Server Status : notReady
Server Addressing Format : ipaddr
IP Address/Host Name : 0.0.0.0
Destination Port : 1812
VLAN Identifier : -1