This section describes the following procedures:
l
Configuring MAC Authentication for Wireless Network Profiles on page 171
l
Configuring MAC Authentication for Wired Profiles on page 172
Configuring MAC Authentication for Wireless Network Profiles
You can configure MAC authentication for a wired profile in the Instant UI or the CLI.
In the Instant UI
To enable MAC Authentication for a wireless network:
1. On the
Network
tab, click
New
to create a new network profile or select an existing profile for which you
want to enable MAC authentication and click
edit
.
2. In the
Edit <profile-name>
or the
New WLAN
window, ensure that all required WLAN and VLAN
attributes are defined, and then click
Next
.
3. On the
Security
tab, select
Enabled
from the
MAC authentication
drop-down list for the
Personal
or
the
Open
security level.
4. Specify the type of authentication server to use.
5. If an internal authentication server is used, perform the following steps to allow MAC-address-based
authentication:
a. Click the
Users
link beside the
Internal server
parameter. The
Users
window is displayed.
b. Specify the client MAC address as the username and password.
c. Specify the type of the user (employee or guest).
d. Click
Add
.
e. Repeat the steps to add more users.
f. Click
OK
.
6. To allow the IAP to use a delimiter in the MAC authentication request, specify a character ( for example,
colon or dash) as a delimiter for the MAC address string. For example, if you specify colon as the delimiter,
MAC addresses in the xx:xx:xx:xx:xx:xx format are used. If the delimiter is not specified, the MAC address in
the xxxxxxxxxxxx format is used.
7. To allow the IAP to use uppercase letters in the MAC address string, set
Uppercase support
to
Enabled
.
8. Configure other parameters as required.
9. Click
Next
to define access rules, and then click
Finish
to apply the changes.
In the CLI
To configure MAC-address based authentication with external server:
(Instant AP)(config)# wlan ssid-profile <name>
(Instant AP)(SSID Profile <name>)# type {<Employee>|<Voice>|<Guest>}
(Instant AP)(SSID Profile <name>)# mac-authentication
(Instant AP)(SSID Profile <name>)# mac-authentication-delimiter <delim>
(Instant AP)(SSID Profile <name>)# mac-authentication-upper-case
(Instant AP)(SSID Profile <name>)# external-server
(Instant AP)(SSID Profile <name>)# auth-server <server-name1>
(Instant AP)(SSID Profile <name>)# auth-server <server-name2>
(Instant AP)(SSID Profile <name>)# server-load-balancing
(Instant AP)(SSID Profile <name>)# radius-reauth-interval <minutes>
(Instant AP)(SSID Profile <name>)# end
(Instant AP)# commit apply
To add users for MAC authentication based on internal authentication server:
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
Authentication and User Management |
171
