Configuring A Mac Filter And Station List On The Ap; Configuring Mac Authentication On The Radius Server; Figure 28 - Configure Mac Authentication; Table 30 - Mac Authentication - D-Link DWL-2600AP Administrator's Manual

Unified Access Point Administrator's Guide

Configuring a MAC Filter and Station List on the AP

The MAC Authentication page allows you to control access to UAP based on MAC addresses. Based on how you
set the filter, you can allow only client stations with a listed MAC address or deny access to the stations listed.
When you enable MAC Authentication and specify a list of approved MAC addresses, only clients with a listed MAC
address can access the network. If you specify MAC addresses to deny, all clients can access the network except for
the clients on the deny list.
To enable filtering by MAC address, click the MAC Authentication tab.
Note: Global MAC Authentication settings apply to all VAPs on all supported radios.
The following table describes the fields and configuration options available on the MAC Authentication page.
Field
Filter
Stations List
Note: After you configure local MAC Authentication settings, you must click Apply to apply the
changes and to save the settings. Changing some settings might cause the AP to stop and
restart system processes. If this happens, wireless clients will temporarily lose connectivity. We
recommend that you change AP settings when WLAN traffic is low.

Configuring MAC Authentication on the RADIUS Server

January 2015

Figure 28 - Configure MAC Authentication

Description
To set the MAC Address Filter, select one of the following options:
•) Allow only stations in the list. Any station that is not in the Stations List is denied
access to the network through the AP.
•) Block all stations in list. Only the stations that appear in the list are denied access to
the network through the AP. All other stations are permitted access.
Note: The filter you select is applied to the clients in the station list, regardless of whether
that station list is local or on the RADIUS server.
This is the local list of clients that are either permitted or denied access to the network
through the AP. To add a MAC Address to the local Stations List, enter its 48-bit MAC
address into the lower text boxes, then click Add.
To remove a MAC Address from the Stations List, select its 48-bit MAC address, then click
Remove.
The stations in the list will either be allowed or denied access based on how you set the filter
in the previous field.
Note: If the MAC authentication type for the VAP is set to Local, the AP uses the Stations
List to permit or deny the clients access to the network. If the MAC authentication type is set
to RADIUS, the AP ignores the MAC addresses configured in this list and uses the list that is
stored on the RADIUS server. The MAC authentication type is set on the VAP configuration
page.

Table 30 - MAC Authentication

Section 4 - Managing the Access Point
Unified Access Point Administrator's Guide
Page 59