Avaya WLAN 8100 Series, Справочник, Страница: 115 / 382

Configure blacklist devices using the following command:
WCP8180(config-wireless)#security
WCP8180(config-security)#mac-db blacklist ?
H.H.H MAC address of the blacklisted user
Configure whitelist devices using the following command:
Important:
To enable a client to access the wireless network, you must manually add the
client MAC address to the whitelist table. Whitelisted clients are displayed as
known
in detected client table.
WCP8180(config-wireless)#security
WCP8180(config-security)#mac-db whitelist ?
H.H.H MAC address of the whitelisted user
Verify blacklist and whitelist configuration:
WCP8180#show wireless security mac-db ?
Show black and white listed users
blacklist Display Blacklisted users
whitelist Display whitelisted users
Validating client MAC addresses against a RADIUS server
Use this procedure to configure a network profile to validate client MAC addresses against a
RADIUS server.
The following configuration requirements must be satisfied for this mode of authentication:
• The RADIUS server is properly configured and is enabled to support the PAP protocol.
• Appropriate RADIUS profiles are configured on the network to associate with the network
profile.
• The MAC addresses of wireless client devices (to be validated against the RADIUS
server), are configured on the RADIUS server.
When a wireless client device is not configured on the RADIUS server, MAC validation
for that device fails, and the client is blacklisted for a configurable timeout period known
as the
known-client-ageout
.
Another attempt to validate a blacklisted client is made only after the timeout period
elapses. If the client device MAC address is added to the RADIUS server, MAC validation
succeeds and the client device is granted wireless network access. Otherwise, the client
device continues to be blacklisted.
ACLI reference for the Wireless LAN (WLAN) 8100
Avaya WLAN 8100 CLI Reference August 2013 115