Authentication
Authentication section of this web page to set up the local database, and configure all access points in the wireless network service area with the same MAC address database.
Radius MAC: The MAC address of the associating station is sent to a configured RADIUS server for authentication. When using a RADIUS authentication server for MAC address authentication, the server must first be configured in the Radius window (see “RADIUS” on page 8). The database of MAC addresses and filtering policy must be defined in the RADIUS server.
NOTE: MAC addresses on the RADIUS server can be entered in four different formats (see “RADIUS” on page 8).
You can enable 802.1X as optionally supported or as required to enhance the security of the wireless network. (Default: Disable)
Disable: The access point does not support 802.1X authentication for any wireless client. After successful wireless association with the access point, each client is allowed to access the network.
Supported: The access point supports 802.1X authentication only for clients initiating the 802.1X authentication process (i.e., the access point does not initiate 802.1X authentication). For clients initiating 802.1X, only those successfully authenticated are allowed to access the network. For those clients not initiating 802.1X, access to the network is allowed after successful wireless association with the access point. The 802.1X supported mode allows access for clients not using WPA or WPA2 security.
Required: The access point enforces 802.1X authentication for all associated wireless clients. If 802.1X authentication is not initiated by a client, the access point will initiate authentication. Only those clients successfully authenticated with 802.1X are allowed to access the network.
NOTE: If 802.1X is enabled on the access point, then RADIUS setup must be completed (See “RADIUS” on page 8.)
When 802.1X is enabled, the broadcast and session key rotation intervals can also be configured.
Broadcast Key Refresh Rate: Sets the interval at which the broadcast keys are
refreshed for stations using 802.1X dynamic keying. (Range:
Default: 0 means disabled)
