Step 2
Choose how the WAP device uses the filter list:
•
Permit (Permit Only Clients in the List)
—Any station that is not in the Stations List is denied access to the
network through the WAP device.
•
Deny (Deny All Clients in the List)
—Only the stations that appear in the list are denied access to the network
through the WAP device. All other stations are permitted access.
The filter setting also applies to the Client filter list stored on the RADIUS server, if one exists.
Note
Step 3
Continue entering MAC addresses until the list is complete. Click the arrow next to
Associated Clients
to display the
list. Choose one of the MAC address and then click
Add
. One rule will be added to the
MAC Address Table
. The
Associated Clients
list includes the following:
•
MAC Address
—The MAC address of the associated wireless client.
•
Host Name
—The hostname of the associated wireless client.
•
IP Address
—The IP address of the associated wireless client.
•
Network (SSID)
— The Service Set Identifier (SSID) for the WAP device. The SSID is an alphanumeric string of
up to 32 characters that uniquely identifies a wireless local area network. It is also referred to as the Network Name.
Step 4
Click
Apply
.
Configuring MAC Authentication on the Radius Server
If one or more VAPs are configured to use a Client filter you must configure the station list on the RADIUS
server. The format for the list is described in this table.
Value
Description
RADIUS Server
Attribute
Valid Ethernet MAC
address
MAC address of the client station.
User-Name (1)
NOPASSWORD
A fixed global password used to look up a client
MAC entry.
User-Password (2)
Scheduler
The Radio and VAP scheduler allows you to configure a rule with a specific time interval for the VAPs or
radios to be operational.
You can use this feature is to schedule the radio to operate or allow access to the VAPs only during the office
working hours in order to achieve security and reduce power consumption.
The WAP device supports up to 16 profiles. Only valid rules are added to the profile. Up to 16 rules are
grouped together to form a scheduling profile. Periodic time entries belonging to the same profile cannot
overlap.
Cisco WAP581 Wireless-AC/N Dual Radio Access Point with 2.5GbE LAN Administration Guide
57
Wireless
Configuring MAC Authentication on the Radius Server