Configuring The Nac Exclusion List - Motorola RFS Series Reference Manual

4-70 Motorola RF Switch System Reference Guide

4.5.5 Configuring the NAC Exclusion List

The switch provides a means to bypass NAC for 802.1x devices without a NAC agent. For Motorola handheld
devices (like the MC9000), authentication is achieved using an exclusion list.
A list of MAC addresses (called an exclusion list) can be added to each WLAN. Each has a separate
configuration for the Radius server (which only conducts EAP authentication). An exclusion list is a global
index-based configuration. An exclusion list can be configured and associated to any WLAN.
If a device's MAC address is not present in an exclusion list, it will go through the NAC server (LAN enforcer)
and thereby a 802.1x host integrity check. For every WLAN configuration, there are two separate EAP servers
(Radius and NAC).
Whenever a host entry is added or deleted from/to the list, the associated WLAN is updated and
deauthenticated. The de-authenticated MU can be re-authenticated once it receives the de-authentication
information from the WLAN.
For a NAC configuration example using the switch CLI, see
CLI on page 4-73.
To view the attributes of a NAC exclusion list:
1. Select Network
2. Select the NAC Exclude
The Exclude Lists
3. Use the Add
Adding an Exclude List to the WLAN on page
The List Configuration
can add more than one device to this list.
4. Use the Add
on a WLAN. You can create up to 32 lists (both include and exclude combined together) and 64 MAC
entries maximum per list. For more information, see
71.
> Wireless LANs from the main menu tree.
tab to view and configure all the NAC include enabled devices.
field displays a list of devices that can be excluded from a WLAN.
button to add a device that can be excluded on a WLAN. For more information, see
field displays a list of MAC addresses that can be excluded from a WLAN. You
button (within the List Configuration field)
NAC Configuration Examples Using the Switch
4-71.
to add devices excluded from NAC compliance
Configuring Devices on the Exclude List on page 4-