Colubris Networks CN3000 Administrator's Manual page 25

Chapter 2 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - How it works - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Chapter 2
MAC-based authentication
The CN3000 can authenticate devices based on their MAC address. This is useful for
authenticating devices that do not have a web browser (cash registers, for example).
These devices do not log in through the public access interface, rather, as soon as the
CN3000 sees their MAC address appear on the network, the CN3000 attempts to
authenticate them. To setup these accounts, see page 160.
WPA/802.1x
The CN3000 provides full support for customers with 802.1x or WPA client software.
The CN3000 authenticates users via an external RADIUS server or by using preshared
keys (WPA only).
The CN3000 supports 802.1x client software that uses EAP-TLS, EAP-TTLS, EAP-CIM,
and PEAP. Dynamic key rotation is supported.
Note: Colubris Networks does not recommend the use of 802.1x without enabling
dynamic WEP encryption.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -