Extreme Networks Summit WM3000 Series, Reference Manual

Page: 165 / 513

Summit WM3000 Series Controller System Reference Guide
165
WLANController(config-wireless-client-list) #
NOTE
The instance changes from (config-wireless) to (config-wireless-client-list).
2 Add a host entry to the include list. This adds a specified MAC entry/MAC range into the client’s
include list.
WLANController(config-wireless-client-list) #station pc1 AA:BB:CC:DD:EE:FF
WLANController(config-wireless-client-list) #
3 Associate the include list to a WLAN. This adds the client’s include list into the WLAN.
WLANController(config-wireless-client-list) #wlan 1
WLANController(config-wireless-client-list) #
Creating an Exclude List
To create a NAC Exclude List:
1 Define the NAC include list.
WLANController(config-wireless) #client exclude-list Desktop
WLANController(config-wireless-client-list) #
2 Add a host entry into the exclude list.
WLANController(config-wireless-client-list) #station pc10 AB:BC:CD:DE:EF:FA
WLANController(config-wireless-client-list) #
3 Associate the exclude list to a WLAN.
WLANController(config-wireless-client-list) #wlan 1
WLANController(config-wireless-client-list) #
Configuring the WLAN for NAC
Many handheld devices are required to bypass NAC and a few laptops and desktops are required to be
NAC validated.
1 Set the NAC mode for WLAN. A NAC validation is conducted for station entries in the include list.
The station entries are authenticated using the Radius server.
WLANController(config-wireless) #wlan 1 nac-mode bypass-nac-except-include-list
WLANController (config-wireless) #
2 Configure the WLAN’s NAC server settings.
a
Configure the NAC Server’s IP address.
WLANController(config-wireless) #wlan 1 nac-server primary 192.168.1.10
WLANController(config-wireless) #
b
Configure the NAC Server’s Radius Key.
WLANController(config-wireless) #wlan 1 nac-server primary radius-key my-secret
WLANController(config-wireless) #