Defining Mac-Based Authentication For A Wm-Ad - Extreme Networks Summit WM User Manual

NOTE
If you have already assigned a server to either MAC-based authentication or accounting, and you want to use it
again for authentication, highlight its name in the list next to the Up and Down buttons and select the Use server
for Authentication checkbox. The server's default information is displayed.

Defining MAC-based authentication for a WM-AD

MAC-based authentication enables network access to be restricted to specific devices by MAC address.
The Summit WM Controller queries a RADIUS server for a MAC address when a wireless client
attempts to connect to the network.
MAC-based authentication can be set up on any type of WM-AD, in addition to the Captive Portal or
AAA authentication. To set up a RADIUS server for MAC-based authentication, you must set up a user
account with UserID=MAC and Password=MAC (or a password defined by the administrator) for each
user. Specifying a MAC address format and policy depends on which RADIUS server is being used.
If MAC-based authentication is to be used in conjunction with the 802.1X or Captive Portal
authentication, an additional account with a real UserID and Password must also be set up on the
RADIUS server.
MAC-based authentication responses may indicate to the Summit WM Controller what WM-AD a user
should be assigned to. Authentication (if enabled) can apply on every roam.
To define MAC-based authentication for a WM-AD:
1 From the main menu, click WM Access Domain Configuration. The WM Access Domain
Configuration page is displayed.
2 In the left pane WM Access Domains list, click the WM-AD you want to set up MAC-based
authentication for. The Topology tab is displayed.
3 Click the Auth & Acct tab. On the Auth & Acct tab, there are three options:
Auth - Use to define authentication servers.
MAC - Use to define servers for MAC-based authentication.
Acct - Use to define accounting servers.
4 Click MAC. The MAC fields are displayed.
5 From the RADIUS drop-down list, click the server you want to use for MAC authentication, and
then click Use. The server's default information is displayed and a red asterisk is displayed next to
MAC, indicating that a server has been assigned.
The RADIUS servers are defined on the Global Settings page. For more information, see
global settings" on page
Summit WM User Guide, Software Version 5.3
149.
"WM-AD
177