Chapter 4 Security Setup
Setting Up MAC-Based Authentication
4-32
Cisco Aironet 1200 Series Access Point Software Configuration Guide
OL-2159-03
Step 8
Enter the port number the server uses for authentication. The default setting,
1812
, is the port setting for Cisco’s RADIUS server, the Cisco Secure Access
Control Server (ACS), and for many other RADIUS servers. Check your server’s
product documentation to find the correct port setting.
Step 9
Enter the shared secret used by the server in the Shared Secret entry field. The
shared secret on the access point must match the shared secret on the server.
Step 10
Enter the number of seconds the access point should try contacting the primary
authentication server in the Timeout entry field. If the primary authentication
server does not respond within this time, the access point tries to contact the
backup authentication server if one is specified.
Step 11
Select
MAC Address Authentication
under the server. If you set up a backup
authentication server, select
MAC Address Authentication
under the backup
server, also.
Step 12
Click
OK
. You return automatically to the Setup page.
Step 13
Create a list of allowed MAC addresses for your authentication server. Enter the
MAC addresses of all allowed clients as users in the server’s database. The
“Enabling MAC-Based Authentication in Cisco Secure ACS” section on
page 4-35
describes how to create a list of MAC addresses for your RADIUS
server.
Note
Be sure to include your own MAC address in the authentication server’s
list to avoid losing your connection to the access point.
Step 14
You can enable MAC authentication on one or both of the access point radios on
the AP Radio Advanced pages. Click
Advanced
for the internal radio or the radio
module in the AP Radio row of the Network Ports section at the bottom of the
Setup page. The radio’s AP Radio Advanced page appears.
Figure 4-12
shows the
AP Radio Advanced page for the internal radio.
