Defining Mac-Based Authentication For A Vns - Siemens HiPath C10 User Manual

hwc_vnsconfiguration.fm
Virtual Network configuration
Authentication for a VNS
AP's
●
VNS's
●
SSID
●
The Vendor Specific Attributes must be defined on the RADIUS server.
11. If applicable, select Set as primary server.
12. To save your changes, click Save.
If you have already assigned a server to either MAC-based authentication or
>
accounting, and you want to use it again for authentication, highlight its name in
the list next to the Up and Down buttons and select the Use server for
Authentication checkbox. The server's default information is displayed.
7.3.4

Defining MAC-based authentication for a VNS

MAC-based authentication enables network access to be restricted to specific devices by MAC
address. The HiPath Wireless Controller queries a RADIUS server for a MAC address when a
wireless client attempts to connect to the network.
MAC-based authentication can be set up on any type of VNS, in addition to the Captive Portal
or AAA authentication. To set up a RADIUS server for MAC-based authentication, you must set
up a user account with UserID=MAC and Password=MAC for each user.
If MAC-based authentication is to be used in conjunction with the 802.1x or Captive Portal
authentication, an additional account with a real UserID and Password must also be set up on
the RADIUS server.
To define MAC-based authentication for a VNS:
1. From the main menu, click Virtual Network Configuration. The Virtual Network
Configuration screen appears.
2. In the left pane Virtual Networks list, click the VNS you want to set up MAC-based
authentication for. The Topology tab is displayed.
3. Click the Auth & Acct tab. On the Auth & Acct tab, there are three options:
Auth – Use to define authentication servers.
●
MAC – Use to define servers for MAC-based authentication.
●
Acct – Use to define accounting servers.
●
4. Click MAC. The MAC fields are displayed.
148
HiPath Wireless Controller, Access Points and Convergence Software V4.0, C10/C100/C1000 User Guide
A31003-W1040-U101-1-7619, July 2006 DRAFT