Cisco Systems WAP321, WAP121 manual Configuring MAC Authentication on the Radius Server

Wireless	5
MAC Filtering

Up to 512 MAC addresses can be added to the filter list.

To configure MAC filtering:

STEP 1 Select Wireless > MAC Filtering in the navigation pane.

STEP 2 Select how the WAP device uses the filter list:

•Allow only stations in the list—Any station that is not in the Stations List is denied access to the network through the WAP device.

•Block all stations in list—Only the stations that appear in the list are denied access to the network through the WAP device. All other stations are permitted access.

NOTE The filter setting also applies to the MAC filtering list stored on the

RADIUS server, if one exists.

STEP 3 In the MAC Address field, enter the MAC address to allow or block and click Add.

The MAC address appears in the Stations List.

STEP 4 Continue entering MAC addresses until the list is complete, and then click Save. The changes are saved to the Startup Configuration.

NOTE To remove a MAC address from the Stations List, select it and then click Remove.

NOTE After new settings are saved, the corresponding processes may be stopped and restarted. When this happens, the WAP device may lose connectivity. We recommend that you change WAP device settings when a loss of connectivity will least affect your wireless clients.

Configuring MAC Authentication on the RADIUS Server

If one or more VAPs are configured to use a MAC filter stored on a RADIUS authentication server, you must configure the station list on the RADIUS server. The format for the list is described in this table:

RADIUS Server	Description	Value
Attribute
User-Name (1)	MAC address of the client station.	Valid Ethernet MAC
		address.

Cisco Small Business WAP121 and WAP321 Wireless-N Access Point with PoE 89