Motorola RFS Series Reference Manual page 162

4-74 Motorola RF Switch System Reference Guide
3. Associate the exclude list to a WLAN.
RF Switch(config-wireless-client-list) #wlan 1
RF Switch(config-wireless-client-list) #
4.5.6.3 Configuring the WLAN for NAC
Many handheld devices are required to bypass NAC and a few laptops and desktops are required to be NAC
validated.
1. Set the NAC mode for WLAN. A NAC validation is conducted for station entries in the include list. The
station entries are authenticated using the Radius server.
RF Switch(config-wireless) #wlan 1 nac-mode bypass-nac-except-include-list
RF Switch (config-wireless) #
2. Configure the WLAN's NAC server settings.
a. Configure the NAC Server's IP address.
RF Switch(config-wireless) #wlan 1 nac-server primary 192.168.1.10
RF Switch(config-wireless) #
b. Configure the NAC Server's Radius Key.
RF Switch(config-wireless) #wlan 1 nac-server primary radius-key my-secret
RF Switch(config-wireless) #
NOTE: Configure the secondary NAC server for redundancy.
c. Configure the secondary NAC server's IP address.
RF Switch(config-wireless) #wlan 1 nac-server secondary 192.168.1.20
RF Switch(config-wireless) #
d. Configure the secondary NAC Server's Radius Key.
RF Switch(config-wireless) #wlan 1 nac-server secondary radius-key my secret-2
RF Switch(config-wireless) #
3. MUs not NAC authenticated use Radius for authentication. To configure the WLAN's Radius settings:
a. Configure the Radius server's IP address.
RF Switch(config-wireless) #wlan 1 radius-server primary 192.168.1.30
RF Switch(config-wireless) #
b. Configure the server's Radius Key
RF Switch(config-wireless) #wlan 1 radius-server primary radius-key my-rad-secret
RF Switch(config-wireless )#
c. Configure the secondary Radius server's IP address.
RF Switch(config-wireless) #wlan 1 radius-server secondary 192.168.1.40
RF Switch(config-wireless) #
d. Configure the secondary server's Radius Key.