Checking Wlan Clients With Radius (Mac Filter) - Lancom WLC-4006 User Manual

Activate VLAN tagging for the WLAN Controller. This is done in the phys-
ical parameters of the profile by entering a value greater than '0' ('Man-
agement VLAN ID'
For authentication via 802.1x, go to the encryption settings for the pro-
file's logical WLAN network and choose a setting that triggers an authen-
tication request.
To check the MAC addresses, activate the MAC check for the profile's log-
ical WLAN network.
For the management of WLAN modules with a WLAN Controller, a

RADIUS server is required to operate authentication via 802.1x and
MAC-address checks. The WLAN Controller automatically defines
itself as the RADIUS server in the Access Points that it is managing—
all RADIUS requests sent to the Access Point are then directly for-
warded to the WLAN Controller, which can either process the requests
itself or forward them to an external RADIUS server. An external
RADIUS server is required for the automatic assignment of a VLAN ID
based on registration data.
To forward RADIUS requests to another RADIUS server, use LANconfig to
enter its address into the list of forwarding servers in the configuration
area 'RADIUS servers' on the 'Forwarding' tab. Alternatively, external
RADIUS servers can be entered in WEBconfig under Expert configura-
tion Setup
Configure the entries in the RADIUS server so that WLAN clients placing
requests will be assigned the appropriate VLAN IDs as based on the iden-
tification of certain characteristics.
Further information about RADIUS is available in the LCOS reference

manual and in the documentation for your RADIUS server.
4.3.9

Checking WLAN clients with RADIUS (MAC filter)

To use RADIUS to authenticate WLAN clients and grant them WLAN access
based on their MAC address, an external RADIUS server can be used, as can
the internal user table in the LANCOM WLAN Controller.
In LANconfig enter the approved MAC addresses into the RADIUS database in
the configuration area 'RADIUS servers' on the 'General' tab. Enter the MAC
LANCOM WLC-4006 - LANCOM WLC-4025
Chapter 4: Configuring the WLAN Controller
→
Page 56) for the management VLAN ID.
RADIUS Server Forward server.
75