ZyXEL Communications NXC2500 User Manual page 171

MAC Address Accounts
Use an external server to authenticate wireless clients by MAC address. After authentication the
NXC maps the wireless client to a mac-address user account (MAC role). Configure user-aware
features to control MAC address user access to network services.
For example, do the following to give a notebook access to a network printer.
Configure the external server to authenticate the notebook's wireless client MAC address.
1
Click Configuration > Object > AP Profile > SSID > Security List > Add/Edit Security
2
Profile and configure an SSID security profile's MAC authentication settings to have the AP use the
external server to authenticate wireless clients by MAC address (see
198).
Click Configuration > Object > User/Group > User > Add and create a MAC address user
3
account (see
Click Configuration > Object > User/Group > MAC Address > Add and map the notebook's
4
MAC address to the MAC address user account (also called a MAC role). See
185.
User Groups
User groups may consist of user accounts or other user groups. Use user groups when you want to
create the same rule for several user accounts, instead of creating separate rules for each one.
Note: You cannot put access users and admin users in the same user group.
Note: You cannot put the default admin account into any user group.
User Awareness
By default, users do not have to log into the NXC to use the network services it provides. The NXC
automatically routes packets for everyone. If you want to restrict network services that certain
users can use via the NXC, you can require them to log in to the NXC first. The NXC is then 'aware'
of the user who is logged in and you can create 'user-aware policies' that define what services they
can use.
User Role Priority
The NXC checks the following in order of priority.
User role setting in ext-user.
1
User role setting in ext-group-user.
2
User role setting in default user (ldap-users, ad-users, radius-users).
3
NXC2500 User's Guide
Section 15.2.1 on page 173).
Chapter 15 User/Group
Section 16.3.2.1 on page
Section 15.5 on page
171