Configuring Mac Authentication Caching - Allen-Bradley Stratix 5100 User Manual

Chapter 12 Configuring Authentication Types
366
2. Enter the ssid defined in Step 2 to assign the ssid to the selected radio
interface.
ssid ssid-string
3. Return to privileged EXEC mode.
exit
4. Use the broadcast key rotation command to configure additional updates
of the WPA group key.
broadcast-key [ vlan vlan-id ]
{ change seconds }
[ membership-termination ]
[ capability-change ]
5. (Optional) Save your entries in the configuration file.
copy running-config startup-config
This example shows how to configure a pre-shared key for clients by using WPA
and static WEP, with group key update options:
ap# configure terminal
ap(config-if)# ssid batman
ap(config-ssid)# wpa-psk ascii batmobile65
ap(config)# interface dot11radio 0
ap(config-ssid)# ssid batman
ap(config-if)# exit
ap(config)# broadcast-key vlan 87 membership-
termination capability-change

Configuring MAC Authentication Caching

If MAC-authenticated clients on your wireless LAN roam frequently, you can
enable a MAC authentication cache on your access points. MAC authentication
caching reduces overhead because the access point authenticates devices in its
MAC-address cache without sending the request to your authentication server.
When a client device completes MAC authentication to your authentication
server, the access point adds the client's MAC address to the cache.
Beginning in privileged EXEC mode, follow these steps to enable MAC
authentication caching:
1. Enter global configuration mode.
configure terminal
2. Enable MAC authentication caching on the access point.
dot11 aaa mac-authen filter-cache [timeout seconds]
Rockwell Automation Publication 1783-UM006A-EN-P - May 2014