Configuring Mac Address Authentication; Using The Cli - Foundry Networks IronPoint 200 User Manual

Foundry IronPoint 200 User Guide

Configuring MAC Address Authentication

To implement MAC address authentication, you must set up a database of client MAC addresses
either locally on the access point or centrally on a configured RADIUS server.

Using the CLI

To configure local MAC authentication on the access point, use the mac-authentication server
command from the CLI configuration mode to enable local MAC authentication. Set the default for
MAC addresses not in the local table using the address filter default command, then enter MAC
addresses in the local table using the address filter entry command. To remove an entry from the
table, use the address filter delete command. To display the current settings, use the show
authentication command from the Exec mode.
Foundry AP(config)#mac-authentication server local
Foundry AP(config)#address filter default denied
Foundry AP(config)#address filter entry 00-70-50-cc-99-1a denied
Foundry AP(config)#address filter entry 00-70-50-cc-99-1b allowed
Foundry AP(config)#address filter entry 00-70-50-cc-99-1c allowed
Foundry AP(config)#address filter delete 00-70-50-cc-99-1c
Foundry AP(config)#exit
Foundry AP#show authentication
Authentication Information
=========================================================
MAC Authentication Server
MAC Auth Session Timeout Value : 5 min
802.1x supplicant
802.1x supplicant user
802.1x supplicant password
Address Filtering
System Default : DENY addresses not found in filter table.
Filter Table
MAC Address
-----------------
00-70-50-cc-99-1a
00-70-50-cc-99-1b
=========================================================
Foundry AP#
To configure RADIUS MAC authentication on the access point, use the mac-authentication server
command from the CLI configuration mode to enable remote MAC authentication. Set the timeout
value for re-authentication using the mac-authentication session-timeout command. Be sure to
18-2
: LOCAL
: DISABLED
: ****
: ****
: DENIED
Status
----------
DENIED
ALLOWED
© 2006 Foundry Networks, Inc. November 2006