Cisco Systems OL-6415-04 manual Authentication open, Mac-address list-name alternate

Chapter 6 Configuring Authentication Types

Configure Authentication Types

	Command	Purpose
Step 3 authentication open		(Optional) Set the authentication type to open for this SSID.
	[mac-address list-name[alternate]]	Open authentication allows any device to authenticate and then
	[[optional] eap list-name]	attempt to communicate with the access point.
		Note The following EAP methods are supported: EAP-MD5,
				EAP_SIM, EAP-TTLS, EAP-LEAP, EAP-PEAP (v0
				and v1), EAP-TLS, AND EAP-FAST.
		• (Optional) Set the SSID authentication type to open with
			MAC address authentication. The access point forces all
			client devices to perform MAC-address authentication
			before they are allowed to join the network. For list-name,
			specify the authentication method list. Click this link for
			more information on method lists:
			http://www.cisco.com/univercd/cc/td/doc/product/softwar
			e/ios122/122cgcr/fsecur_c/fsaaa/scfathen.htm#xtocid2
			Use the alternate keyword to allow client devices to join
			the network using either MAC or EAP authentication;
			clients that successfully complete either authentication are
			allowed to join the network.
		• (Optional) Set the SSID authentication type to open with
			EAP authentication. The access point forces all client
			devices to perform EAP authentication before they are
			allowed to join the network. For list-name, specify the
			authentication method list.
			Use the optional keyword to allow client devices using
			either open or EAP authentication to associate and become
			authenticated. This setting is used mainly by service
			providers that require special client accessibility.
		Note An access point configured for EAP authentication
			forces all client devices that associate to perform EAP
			authentication. Client devices that do not use EAP
			cannot use the access point.

Cisco Wireless ISR and HWIC Access Point Configuration Guide

6-10 OL-6415-04