Software User Manual
D-Link UAP
12/10/09
34CSFP6XXUAP-SWUM100-D13
Controlling Access by MAC Authentication
Page 61
Table 23
describes the fields and configuration options available on the
MAC Authentication
page
C
ONFIGURING
MAC A
UTHENTICATION
ON
THE
RADIUS S
ERVER
If you use RADIUS MAC authentication for MAC-based access control, you must configure a station list on the RADIUS
server. The station list contains client MAC address entries, and the format for the list is described in the following table.
Note:
Global MAC Authentication settings apply to all VAPs on both radios.
Table 23: MAC Authentication
Field
Description
Filter
To set the MAC Address Filter, select one of the following options:
• Allow only stations in the list
. Any station that is not in the Stations List is denied access to the
network through the AP.
• Block all stations in list
. Only the stations that appear in the list are denied access to the
network through the AP. All other stations are permitted access.
Note:
The filter you select is applied to the clients in the station list, regardless of whether that
station list is local or on the RADIUS server.
Stations List
This is the local list of clients that are either permitted or denied access to the network through the
AP. To add a MAC Address to the local Stations List, enter its 48-bit MAC address into the lower text
boxes, then click Add.
To remove a MAC Address from the Stations List, select its 48-bit MAC address, then click Remove.
The stations in the list will either be allowed or denied access based on how you set the filter in the
previous field.
Note:
If the MAC authentication type for the VAP is set to Local, the AP uses the Stations List to
permit or deny the clients access to the network. If the MAC authentication type is set to RADIUS,
the AP ignores the MAC addresses configured in this list and uses the list that is stored on the
RADIUS server. The MAC authentication type is set on the VAP configuration page.
Note:
After you configure local MAC Authentication settings, you must click
Apply
to apply the changes and to
save the settings. Changing some settings might cause the AP to stop and restart system processes. If this
happens, wireless clients will temporarily lose connectivity. We recommend that you change AP settings when
WLAN traffic is low.
Table 24: RADIUS Server Attributes for MAC Authentication
RADIUS Server Attribute
Description
Value
User-Name (1)
MAC address of the client station.
Valid Ethernet MAC
Address.
User-Password (2)
A fixed global password used to lookup a client MAC entry.
NOPASSWORD
