User's Manual

System Configuration
5-16
5
CLI Commands for RADIUS MAC Authentication – Use the mac-authentication
server command from the global configuration mode to enable remote MAC
authentication. Set the timeout value for re-authentication using the mac-
authentication session-timeout command. Be sure to also configure connection
settings for the RADIUS server (not shown in the following example). To display the
current settings, use the show authentication command from the Exec mode.
CLI Command for 802.1x Supplicant – To configure the access point to operate as a
802.1X supplicant, first use the 802.1X supplicant user command to set a user
name and password for the access point, then use the 802.1X supplicant command
to enable the feature. To display the current settings, use the show authentication
command from the Exec mode (not shown in the following example)
Enterprise AP(config)#mac-authentication server remote 6-72
Enterprise AP(config)#mac-authentication
session-timeout 300
6-72
Enterprise AP(config)#exit
Enterprise AP#show authentication
6-68
Authentication Information
===========================================================
MAC Authentication Server : REMOTE
MAC Auth Session Timeout Value : 300 min
802.1x supplicant : DISABLED
802.1x supplicant user : EMPTY
802.1x supplicant password : EMPTY
Address Filtering : DENIED
System Default : DENY addresses not found in filter table.
Filter Table
MAC Address Status
----------------- ----------
00-70-50-cc-99-1a DENIED
00-70-50-cc-99-1b ALLOWED
=========================================================
Enterprise AP#
Enterprise AP(config)#802.1X supplicant user SMC2555W dot1xpass
6-68
Enterprise AP(config)#802.1X supplicant 6-68
Enterprise AP(config)#