Specifications

Chapter 8 Security Setup
Setting Up MAC-Based Authentication
8-34
Cisco Aironet Access Point Software Configuration Guide
OL-0657-07
devices to authenticate using MAC addresses. To force all client devices to
authenticate using MAC addresses, select Disallowed for all the enabled
authentication types.
When you set Default Unicast Address Filter to disallowed, the access point
discards all unicast traffic except packets sent to the MAC addresses listed as
allowed on the authentication server or on the access point’s Address Filters page.
Note Client devices associated to the access point are not immediately
affected when you set Default Unicast Address Filter to disallowed.
Step 16 Click OK. You return automatically to the Setup page. Client devices that
associate with the access point will not be allowed to authenticate unless their
MAC addresses are included in the list of allowed addresses.
Authenticating Client Devices Using MAC Addresses or EAP
You can set up the access point to authenticate client devices using a combination
of MAC-based and EAP authentication. When you enable this feature, client
devices that associate to the access point using 802.11 open authentication first
attempt MAC authentication. If MAC authentication succeeds, the client device
joins the network; if the client is also using EAP authentication, it attempts to
authenticate using EAP. If MAC authentication fails, the access point waits for the
client device to attempt EAP authentication.
Follow these steps to combine MAC-based and EAP authentication for client
devices using 802.11 open authentication:
Step 1 Follow the steps in the “Setting Up EAP Authentication” section on page 8-20 to
set up EAP. You must select Require EAP under Open authentication on the AP
Radio Data Encryption page to force client devices to perform EAP authentication
if they fail MAC authentication. If you do not select Require EAP, client devices
that fail MAC authentication might be able to join the network without
performing EAP authentication.
Step 2 Follow the steps in the “Setting Up MAC-Based Authentication” section on
page 8-29 to set up MAC-based authentication.