Controlling Access By Mac Authentication; Configuring A Mac Filter And Station List On The Ap; Figure 14: Configuring Mac Authentication - D-Link DWL-8600AP Administrator's Manual

D-Link UAP Software User Manual
12/10/09
C A MAC A
ONTROLLING CCESS BY UTHENTICATION
A Media Access Control (MAC) address is a hardware address that uniquely identifies each node of a network. All IEEE 802
network devices share a common 48-bit MAC address format, usually displayed as a string of 12 hexadecimal digits
00:DC:BA:09:87:65
separated by colons, for example . Each wireless network interface card (NIC) used by a wireless
client has a unique MAC address.
You can use the Administrator UI on the AP or use an external RADIUS server to control access to the network through the
AP based on the MAC address of the wireless client. This feature is called MAC Authentication or MAC Filtering. To control
access, you configure a global list of MAC addresses locally on the AP or on an external RADIUS server. Then, you set a
filter to specify whether the clients with those MAC addresses are allowed or denied access to the network. When a wireless
client attempts to associate with an AP, the AP looks up the MAC address of the client in the local Stations List or on the
RADIUS server. If it is found, the global allow or deny setting is applied. If it is not found, the opposite is applied.
On the VAP page, the MAC Authentication Type setting controls whether the AP uses the station list configured locally on
the MAC Authentication page or the external RADIUS server. The Allow/Block filter setting on the MAC Authentication
page determines whether the clients in the station list (local or RADIUS) can access the network through the AP. For more
information about setting the MAC authentication type, see "Virtual Access Point Settings" on page 46.
C MAC F S L AP
ONFIGURING A ILTER AND TATION IST ON THE
The MAC Authentication page allows you to control access to UAP based on MAC addresses. Based on how you set the
filter, you can allow only client stations with a listed MAC address or deny access to the stations listed.
When you enable MAC Authentication and specify a list of approved MAC addresses, only clients with a listed MAC address
can access the network. If you specify MAC addresses to deny, all clients can access the network except for the clients on
the deny list.
To enable filtering by MAC address, click the MAC Authentication tab.

Figure 14: Configuring MAC Authentication

Page 60

Controlling Access by MAC Authentication

34CSFP6XXUAP-SWUM100-D13