3Com 3CRGPC10075 User Manual page 46

38 C 3: C
HAPTER ONFIGURING THE
A P
CCESS OINT
Configuring RADIUS MAC Authentication
If you have a RADIUS server set up on the network, you can use it to
centralize the authentication of wireless stations based on their MAC
addresses. Authenticated stations will be allowed to associate with the
Access Point.
To use the RADIUS server to authenticate wireless stations based on their
MAC addresses, there are two sets of tasks that you need to perform:
Configure the RADIUS server
■
Configure the RADIUS-based MAC authentication options on the
■
Web interface
Configuring the RADIUS Server
If you enabled RADIUS MAC authentication, do the following to ensure
that client authentication using the RADIUS server works:
1 Ensure that the Access Point can log on to the RADIUS server as a RADIUS
client.
Create a RADIUS client account for the Access Point on the RADIUS
■
server. Use the Access Point's IP address or name and specify the same
shared key as configured on the Access Point.
To ensure that the Access Point can log on to the RADIUS server, verify
■
that the correct RADIUS server address, port, and shared key are
configured on the Access Point. This information is entered either on
the Security screen or the RADIUS-based MAC Authentication screen,
depending on the security method used.
2 On the RADIUS server, create a RADIUS client account for each wireless
station that will authenticate with it. Use the station's MAC address for
the user name, and leave the password blank. The RADIUS server stores
these MAC addresses on a database, which it queries whenever a
wireless station needs to be authenticated.
When RADIUS MAC authentication is enabled and configured, the Access
Point will forward the MAC address of every client that tries to associate
with it to the RADIUS server. Then, the RADIUS server will check if the
station's MAC address is on its database. If it is, the wireless station will
be allowed to associate with the Access Point.
If the wireless station's MAC address is on the RADIUS database, the
entry
xx:xx:xx:xx:xx:xx MAC authentication
(where