16-11
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-30644-01
Chapter16 Configuring Filters
Configuring Filters Using the Web-Browser Interface
In the Corporate Servers section, you can add a new server for your AP. For this:
Step1 Enter the AP’s IP address in the Server field
Step2 Enter the same Shared Secret you entered when defining the AP as a RADIUS client in the previous
page.
Step3 Enter the Authentication Port as 1812.
Step4 Enter the Accounting Port as 1813.
Step5 Click Apply to validate.
Step6 In the Default Server Priorities section, select the AP in the Priority 1 field of the MAC Authentication
priority list.
Step7 Click Apply to validate.

Using an external RADIUS server for MAC address authentication

When using an external RADIUS server for MAC authentication, enter the external RADIUS server
details in the Security > Server Manager > Corporate Servers section. Also select at least one server
in the Default Server Priorities > MAC Authentication list.
Configuring the SSID for MAC Authentication
Once you have defined a source of MAC addresses and defined the MAC addresses (when using the local
list or the AP internal RADIUS server), you need to configure the target SSIDs to use MAC
authentication. For this:
Step1 Go to the Security > SSID Manager page.
Step2 Select or create a new SSID.
Step3 In the Client Authentication Settings section, select the check boxes for each accepted authentication
method. Then from the corresponding drop-down list, select With MAC Authentication.
Step4 To use the default method defined in the Security > Advanced Security page and the default servers
defined in Security > Server Manager page (if applicable), click the Use Defaults option in the MAC
Authentication Servers section.
To use servers different from those defined in the Security > Server Manager page, click the Customize
option and then select the servers to use.
The Customize option does not override the configuration from the Security > Advanced Security page
that defines if the local list or the servers should be used. If you configured the AP to use only the internal
list, choosing the Customize option in the SSID page will have no effect. The Customize option is only
targeted at selecting what MAC server to choose, when MAC servers are selected in the
Security > Advanced Security page.
Step5 Click Apply to validate.