Alfa Network AWAP05O User Manual page 63

• Supported: The access point supports 802.1x authentication only for clients
initiating the 802.1x authentication process (i.e., the access point does not initiate
802.1x authentication). For clients initiating 802.1x, only those successfully
authenticated are allowed to access the network. For those clients not initiating
802.1x, access to the network is allowed after successful wireless association with
the access point.
• Required: The access point enforces 802.1x authentication for all associated
wireless clients. If 802.1x authentication is not initiated by a client, the access point
will initiate authentication. Only those clients successfully authenticated with
802.1x are allowed to access the network.
When 802.1x is enabled, the broadcast and session key rotation intervals can also
be configured.
• Broadcast Key Refresh Rate: Sets the interval at which the broadcast keys are
refreshed for stations using 802.1x dynamic keying. (Range: 0-1440 minutes;
Default: 0 means disabled)
• Session Key Refresh Rate: The interval at which the access point refreshes
unicast session keys for associated clients. (Range: 0-1440 minutes; Default: 0
means disabled)
• 802.1x Re-authentication Refresh Rate: The time period after which a connected
client must be re-authenticated. During the re-authentication process of verifying
the client's credentials on the RADIUS server, the client remains connected the
network. Only if re-authentication fails is network access blocked. (Range: 0-65535
seconds; Default: 0 means disabled)
CLI Commands for Local MAC Authentication – Use the mac-authentication
server command from the global configuration mode to enable local MAC
authentication. Set the default for MAC addresses not in the local table using the
address filter default command, then enter MAC addresses in the local table using
the address filter entry command. To remove an entry from the table, use the
Advanced Configuration
6
6-13