User guide

5-76
CHAPTER 5: COMMAND LINE INTERFACE
MAC Address Authentication
Use these commands to define MAC authentication on the access point. For local
MAC authentication, first define the default filtering policy using the address filter
default command. Then enter the MAC addresses to be filtered, indicating if they
are allowed or denied. For RADIUS MAC authentication, the MAC addresses and
filtering policy must be configured on the RADIUS server.
Table 21 MAC Address Authentication
address filter default
This command sets filtering to allow or deny listed MAC addresses.
Syntax
address filter default <allowed | denied>
• allowed - Only MAC addresses entered as “denied” in the address
filtering table are denied.
• denied - Only MAC addresses entered as “allowed” in the address
filtering table are allowed.
Default
allowed
Command Mode
Global Configuration
Command Function Mode Page
address filter default Sets filtering to allow or deny listed addresses GC 5-76
address filter entry Enters a MAC address in the filter table GC 5-77
address filter delete Removes a MAC address from the filter table GC 5-78
mac- authentication server Sets address filtering to be performed with local or
remote options
GC 5-78
mac- authentication
session-timeout
Sets the interval at which associated clients will be
re-authenticated with the RADIUS server authentication
database
GC 5-79
show authentication Shows all 802.1X authentication settings, as well as the
address filter table
Exec 5-74