Local Mac; Radius Mac - 3Com 3CRWE876075 User Manual

C 4: S C
HAPTER YSTEM ONFIGURATION
NOTE: MAC addresses on the RADIUS server can be entered in four different
formats (see "radius-server radius-mac-format" on page 5-68).
You can enable 802.1X as optionally supported or as required to enhance the
security of the wireless network. (Default: Disable)
NOTE: If 802.1X is enabled on the access point, then RADIUS setup must be
completed (See "RADIUS" on page 8.)
Local MAC: The MAC address of the associating station is compared against
the local database stored on the access point. Use the Local MAC
Authentication section of this web page to set up the local database, and
configure all access points in the wireless network service area with the same
MAC address database.
RADIUS MAC: The MAC address of the associating station is sent to a
configured RADIUS server for authentication. When using a RADIUS
authentication server for MAC address authentication, the server must first be
configured on the RADIUS page (see "RADIUS" on page 4-8). The database of
MAC addresses and filtering policy must be defined in the RADIUS server. The
MAC address of the associating station is used for both the username and
password. For example, an associating station with a MAC address of
12-34-56-78-9A-BC would use a username and password of "12345678abc."
The username and password sent to the server will use the format defined by
"radius-server radius-mac-format" (See "RADIUS Client" on page 5-64), which
has a default setting of "no-delimiter."
Disable: The access point does not support 802.1X authentication for any
wireless client. After successful wireless association with the access point, each
client is allowed to access the network.
Supported: The access point supports 802.1X authentication only for clients
initiating the 802.1X authentication process (i.e., the access point does not
initiate 802.1X authentication). For clients initiating 802.1X, only those
successfully authenticated are allowed to access the network. For those clients
not initiating 802.1X, access to the network is allowed after successful wireless
association with the access point. The 802.1X supported mode allows access
for clients not using WPA or WPA2 security.
Required: The access point enforces 802.1X authentication for all associated
wireless clients. If 802.1X authentication is not initiated by a client, the access
point will initiate authentication. Only those clients successfully authenticated
with 802.1X are allowed to access the network.
4-12