|
If you are creating a new wired profile, complete the Wired Settings and VLAN procedures before specifying security settings. For more information, see Configuring Wired Settings and Configuring VLAN Settings for a WLAN SSID Profile. |
You can configure security parameters for an employee network by using the Instant UI or CLI.
To configure security parameters for an employee network:
1. | Configure the following parameters in the | tab.
| — To enable MAC authentication, select . The MAC authentication is disabled by default. |
| — To enable 802.1X authentication, select . |
| — To enable authentication fail-thru, select . When this feature is enabled, 802.1X authentication is attempted when MAC authentication fails. The checkbox is displayed only when both and are . |
| Select any of the following options for Authentication server 1: |
n | New — On selecting this option, an external RADIUS server must be configured to authenticate the users. For information on configuring an external server, see Configuring an External Server for Authentication.Authentication and User Management |
n | Users link to add the users. For information on adding a user, see Managing IAP Users. | — If an internal server is selected, add the clients that are required to authenticate with the internal RADIUS server. Click the
| Reauth interval — Specify the interval at which all associated and authenticated clients must be reauthenticated. |
| Dynamic Load Balancing between Two Authentication Servers. | — Set this to if you are using two RADIUS authentication servers, so that the load across the two RADIUS servers is balanced. For more information on the dynamic load balancing mechanism, see
2. | Click Access tab details are displayed. | . The
To configure security settings for an employee network:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# mac-authentication
(Instant AP)(wired ap profile <name>)# l2-auth-failthrough
(Instant AP)(wired ap profile <name>)# auth-server <name>
(Instant AP)(wired ap profile <name>)# server-load-balancing
(Instant AP)(wired ap profile <name>)# radius-reauth-interval <Minutes>
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply