Ruckus Wireless ZoneDirector 1100 User Manual page 110

Configuring Security and Other Services
Using an External AAA Server
Using 802.1X EAP + MAC Address Authentication
With the 802.1X EAP + MAC Address authentication method, clients configured with either
"open" or EAP-MD5 authentication methods are both supported on the same WLAN. The
encryption method is limited to "none," and an external RADIUS server is required.
When ZoneDirector authenticates a client, MAC authentication is checked first, followed by
the EAP process. When the client tries to associate, if MAC authentication succeeds, the client
is authorized directly and allowed to pass traffic without any further EAP authentication
required.
If MAC authentication fails, the EAP authentication process begins and the client must provide
a valid EAP account before access is granted.
You can view the actual authentication method used (MAC address or EAP) from the Monitor
> Currently Active Clients page.
Figure 72.
Using 802.1X with EAP-MD5
EAP-MD5 differs from other EAP methods in that it only provides authentication of the EAP
peer to the EAP server but not mutual authentication. ZoneDirector supports 802.1X authen-
tication with EAP-MD5 using either ZoneDirector's internal database or an external RADIUS
server.
To configure a WLAN for EAP-MD5 authentication
1. Go to Configure > WLANs and click the Edit link next to the WLAN you would like to
configure.
2. Under Authentication Options: Method, select 802.1X EAP.
3. Under Encryption Options: Method, select None.
4. Under Authentication Server, select either Local Database or a previously configured
RADIUS server from the list.
5. Click OK to save your changes.
The Monitor > Currently Active Clients page shows the actual authentication
method used for clients in an 802.1X EAP + MAC Address authentication WLAN
98