Client Filter; Configuring A Client Filter List Locally On The Wap Device - Cisco WAP150 Manual

Client Filter

• Session Key Refresh Rate — The interval at which the WAP device refreshes session (unicast) keys
Client Filter
Client filter can be used to permit or deny listed client stations to authenticate with the WAP device. MAC
authentication is configured on the
device may refer to a Client filter list stored on an external RADlUS server, or may refer a Client filter list
stored locally on the WAP device.

Configuring a Client Filter List Locally on the WAP device

The WAP device supports one local Client filter list only. The filter can be configured to grant access only
to the MAC addresses on the list, or to deny access only to addresses on the list.
Up to 512 Client addresses can be added to the filter list.
To configure the Client filter follow these steps:
Step 1
Select Wireless > Client Filter.
Step 2 Choose how the WAP device uses the filter list:
• Permit (Permit Only Clients in the List) —Any station that is not in the Stations List is denied access to the
network through the WAP device.
• Deny (Deny All Clients in the List)—Only the stations that appear in the list are denied access to the network
through the WAP device. All other stations are permitted access.
Note The filter setting also applies to the Client filter list stored on the RADIUS server, if one exists.
Step 3
Continue entering MAC addresses until the list is complete. Click the arrow next to Associated Clients to display the
list. Choose one of the MAC address and then click Add. One rule will be added to the MAC Address Table. The
Associated Clients list includes the following:
• MAC Address—The MAC address of the associated wireless client.
• Host Name—The hostname of the associated wireless client.
• IP Address—The IP address of the associated wireless client.
• Network (SSID)— The Service Set Identifier (SSID) for the WAP device. The SSID is an alphanumeric string of
up to 32 characters that uniquely identifies a wireless local area network. It is also referred to as the Network Name.
Step 4 Click Apply.
Cisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE / Cisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE
58
for each client associated with the VAP. The valid range is from 30 to 86400 seconds. A value of 0
indicates that the session key is not refreshed. The default value is 0.
Networks, on page 52 page. Based on the VAP configuration, the WAP
Wireless