Authenticating Using Both Mac Address List And Radius - Allied Telesis TQ6000 GEN2 Series Management Software User Manual

TQ6000 GEN2 Access Points User's Guide
Authenticating
Using Both MAC
Address List and
RADIUS
122
5. Select Disabled from the MAC Access Control pull-down menu. See
Figure 40 on page 121. This is the default setting.
6. Click the SAVE & APPLY button to save and update the configuration,
or configure other VAPs and save the configurations at once later.
This section contains the procedure for authenticating wireless clients on
VAPs using both the access point's on-board MAC address list and an
external RADIUS server. This is set with the MAC Address List + External
RADIUS option in the MAC Address Control tab. Wireless access points
are authenticated depending on the Allow or Deny setting of the on-board
MAC address filter, as follows:
When the on-board MAC address filter is set to Allow, the wireless

access point authenticates wireless clients in this manner:
- It accepts clients whose MAC addresses are in the on-board MAC
address filter.
- For MAC addresses not in the filter, it forwards them to the RADIUS
server. It accepts clients whose addresses are on the server and
denies clients whose addresses are not on the server.
In summary, when the on-board filter is set to Allow, the wireless access
point accepts clients whose MAC address are either in the on-board filter
or on the RADIUS server.
When the on-board MAC address filter is set to Deny, the wireless

access point authenticates wireless clients in this manner:
- It rejects clients whose MAC addresses are in the on-board MAC
address filter.
- For clients whose addresses are not in the filter, it forwards their
addresses to the RADIUS server. It accepts clients whose
addresses are on the server and denies clients whose addresses
are not on the server.
In summary, when the on-board filter is set to Deny, the wireless access
point accepts clients whose MAC address are not in the on-board filter, but
are on the RADIUS server.
To configure MAC Access Control with both on-board MAC address list
and external RADIUS server, perform the following procedure:
1. Select Settings > VAP / Security from the main menu.
2. Select Radio1 or Radio2 from the sub-menu. The default is Radio1.
You can configure only one radio at a time.
3. Select a VAP to configure from the next sub-menu. The default is
VAP0.