Siemens SCALANCE W1750D UI, Руководство по настройке

Страница: 229 / 570

Authentication and User Management
14.9 Configuring MAC Authentication for a Network Profile
SCALANCE W1750D UI
Configuration Manual, 02/2018 , C79000-G8976-C451-02
229
14.9 Configuring MAC Authentication for a Network Profile
MAC authentication can be used alone or it can be combined with other forms of
authentication such as WEP authentication. However, it is recommended that you do not use
the MAC-based authentication.
This section describes the following procedures:
● Configuring MAC Authentication for Wireless Network Profiles
● Configuring MAC Authentication for Wired Profiles
Configuring MAC Authentication for Wireless Network Profiles
You can configure MAC authentication with 802.1X authentication for a wireless network
profile using the SCALANCE W UI or the CLI.
In the SCALANCE W UI
To configure both MAC and 802.1X authentications for a wireless network::
1.
On the Network tab, click New to create a new network profile or select an existing profile
for which you want to enable MAC and 802.1X authentications and click edit.
2. In the Edit <profile-name> or the New WLAN window, ensure that all required WLAN and
VLAN attributes are defined, and then click Next.
3. On the Security tab, ensure that the required parameters for MAC authentication and
802.1X authentication are configured.
4. Select the Perform MAC authentication before 802.1X check box to use 802.1X
authentication only when the MAC authentication is successful.
5. Select the MAC authentication fail-thru check box to use 802.1X authentication even
when the MAC authentication fails.
6. Click Next and then click Finish to apply the changes
In the CLI
To configure both MAC and 802.1X authentications for a wireless network:
(scalance)(config)# wlan ssid-profile <name>
(scalance)(SSID Profile <name>)# type {<Employee>|<Voice>|<Guest>}
(scalance)(SSID Profile <name>)# mac-authentication
(scalance)(SSID Profile <name>)# l2-auth-failthrough
(scalance)(SSID Profile <name>)# auth-server <server-name1>
(scalance)(SSID Profile <name>)# radius-reauth-interval <minutes>
(scalance)(SSID Profile <name>)# auth-survivability
(scalance)(SSID Profile <name>)# exit
(scalance)(config)# auth-survivability cache-time-out <hours>
(scalance)(config)# end
(scalance)# commit apply