MAC Authentication

MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication is used for authenticating devices based on their physical MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. addresses. MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication requires that the MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address of a machine matches a manually defined list of addresses. This authentication method is not recommended for scalable networks and the networks that require stringent security settings.

MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication can be used alone or it can be combined with other forms of authentication such as WEP Wired Equivalent Privacy. WEP is a security protocol that is specified in 802.11b and is designed to provide a WLAN with a level of security and privacy comparable to what is usually expected of a wired LAN. authentication. However, it is recommended that you do not use the MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. -based authentication. The following MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication combinations can be configured for a wired or wireless network profile.

Configuring MAC Authentication for Wireless Network Profiles

Configuring MAC Authentication for Wired Network Profiles

Configuring MAC Authentication for Wireless Network Profiles

The following procedure describes how to configure MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication for a wired profile in the WebUI.

Table 1: Configuring MAC Authentication for WIreless Network Profiles

New WebUI

Old WebUI

1. In the Configuration > Networks page, click + to create a new network profile or select an existing profile for which you want to enable MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication and click Edit.

2. Ensure that all required WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. and VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. attributes are defined, and then click Next.

3. In the Security tab, toggle the MAC authentication switch for the Personal or the Open security level.

4. In the Authentication server 1 drop-down list, specify the type of authentication server to use.

5. To allow the Instant AP to use a delimiter in the MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication request, specify a character (for example, colon or dash) as a delimiter for the MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address string in the Delimiter character text box. For example, if you specify colon as the delimiter, MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. addresses in the xx:xx:xx:xx:xx:xx format are used. If the delimiter is not specified, the MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address in the xxxxxxxxxxxx format is used.

6. To allow the Instant AP to use uppercase letters in the MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address string, toggle the Uppercase support switch to enable.

NOTE: The Delimiter character and Uppercase support parameters are displayed only when MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication is enabled.

7. Configure other parameters as required.

8. Click Next to define access rules, and then click Finish to apply the changes.

1. On the Networks tab, click New to create a new network profile or select an existing profile for which you want to enable MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication and click edit.

2. In the Edit <profile-name> or the New WLAN window, ensure that all required WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. and VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. attributes are defined, and then click Next.

3. On the Security tab, select Enabled from the MAC authentication drop-down list for the Personal or the Open security level.

4. In the Authentication server 1 drop-down list, specify the type of authentication server to use.

5. If an internal authentication server is used, perform the following steps to allow MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. -address-based authentication:

a. Click the Users link beside the Internal server parameter. The Users window is displayed.

b. Specify the client MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address as the username and password.

c. Specify the type of the user (employee or guest).

d. Click Add.

e. Repeat the steps to add more users.

f. Click OK.

6. To allow the Instant AP to use a delimiter in the MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication request, specify a character (for example, colon or dash) as a delimiter for the MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address string in the Delimiter character text box. For example, if you specify colon as the delimiter, MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. addresses in the xx:xx:xx:xx:xx:xx format are used. If the delimiter is not specified, the MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address in the xxxxxxxxxxxx format is used.

7. To allow the Instant AP to use uppercase letters in the MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address string, set Uppercase support to Enabled.

NOTE: The Delimiter character and Uppercase support parameters are displayed only when MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication is enabled.

8. Configure other parameters as required.

9. Click Next to define access rules, and then click Finish to apply the changes.

The following CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. commands configure MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. -address based authentication with external server:

(Instant AP)(config)# wlan ssid-profile <name>

(Instant AP)(SSID Profile <name>)# type {<Employee>|<Voice>|<Guest>}

(Instant AP)(SSID Profile <name>)# mac-authentication

(Instant AP)(SSID Profile <name>)# mac-authentication-delimiter <delim>

(Instant AP)(SSID Profile <name>)# mac-authentication-upper-case

(Instant AP)(SSID Profile <name>)# external-server

(Instant AP)(SSID Profile <name>)# auth-server <server-name1>

(Instant AP)(SSID Profile <name>)# auth-server <server-name2>

(Instant AP)(SSID Profile <name>)# server-load-balancing

(Instant AP)(SSID Profile <name>)# radius-reauth-interval <minutes>

 

The following CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. command adds users for MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication based on internal authentication server:

(Instant AP)(config)# user <username> [<password>] [portal|radius]

Configuring MAC Authentication for Wired Network Profiles

The following procedure describes how to configure MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication for a wired profile in the WebUI or the CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions..

Table 2: Configuring MAC Authentication for WIred Profiles

New WebUI

Old WebUI

1. In the Configuration > Networks page, click + to create a new network profile or select an existing profile for which you want to enable MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication and click Edit.

2. Ensure that all required wired and VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. attributes are defined, and then click Next.

3. Under Security tab, toggle the MAC authentication switch to enable.

4. In the Authentication server 1 drop-down list, specify the type of authentication server to use.

5. Configure other parameters as required.

6. Click Next to define access rules, and then click Finish to apply the changes.

1. Click the Wired link under More in the main window. The Wired window is displayed.

2. Click New under Wired Networks to create a new network or select an existing profile for which you want to enable MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication and then click Edit.

3. In the New Wired Network or the Edit Wired Network window, ensure that all the required wired and VLAN Virtual Local Area Network. In computer networking, a single Layer 2 network may be partitioned to create multiple distinct broadcast domains, which are mutually isolated so that packets can only pass between them through one or more routers; such a domain is referred to as a Virtual Local Area Network, Virtual LAN, or VLAN. attributes are defined, and then click Next.

4. Under Security tab, select Enabled from the MAC authentication drop-down list.

5. In the Authentication server 1 drop-down list, specify the type of authentication server to use.

6. If an internal authentication server is used, perform the following steps to allow MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. -address-based authentication:

a. Click the Users link beside Internal server. The Users window is displayed.

b. Specify the client MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. address as the username and password.

c. Specify the type of the user (employee or guest).

d. Click Add.

e. Repeat the steps to add more users.

f. Click OK.

7. Configure other parameters as required.

8. Click Next to define access rules, and then click Finish to apply the changes.

9. Click Next to define access rules, and then click Finish to apply the changes.

The following CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. commands configure MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. -address-based authentication with external server:

(Instant AP)(config)# wired-port-profile <name>

(Instant AP)(wired ap profile <name>)# type {<employee>|<guest>}

(Instant AP)(wired ap profile <name>)# mac-authentication

(Instant AP)(wired ap profile <name>)# auth-server <server-1>

(Instant AP)(wired ap profile <name>)# auth-server <server-2>

(Instant AP)(wired ap profile <name>)# server-load-balancing

(Instant AP)(wired ap profile <name>)# radius-reauth-interval <Minutes>

The following CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. command adds users for MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication based on internal authentication server:

(Instant AP)(config)# user <username> [<password>] [portal|radius]