Configuring MAC Authentication | D-Link DWS 3000 instruction

D-Link Unified Access System User Manual

Configuring MAC Authentication

For each network, you can configure whether to use a local or RADIUS database for client MAC authentication. To use RADIUS-based MAC authentication for wireless clients, you add an entry for each client in the etc/raddb/users file. If the default action for MAC Authentication on the switch is set to “Allow,” only clients that have an entry in the users file are allowed access to the network through the AP. If the default action is set to “deny” the clients with a MAC address in the users file cannot authenticate with the AP.

The following line is an example of an entry for a client in the etc/raddb/users file.

00-0F-FE-1C-F2-67 Auth-Type: = Local, User-Password == “NOPASSWORD"

NOTE: The password is always NOPASSWORD, and the MAC address of the client uses hyphens, not colons.

186 © 2001- 2006 D-Link Corporation/D-Link Systems, Inc. All Rights Reserved.

Image 186

D-Link DWS 3000 user manual Configuring MAC Authentication

Contents

Copyright 2006. All rights reserved Warnung FCC WarningCE Mark Warning Precaución Table of Contents Installing the D-Link Unified Access System Managing and Maintaining D-Link Access Points Configuring the External Radius Server Technical Support Page List of Tables Page List of Figures Sample Wlan Visualization WPA Personal Configuration Audience Symbol Description ExampleAbout This Document Organization Safety Instructions Safety Cautions Safety Instructions General Precautions for Rack-Mountable Products Battery Handling Reminder Protecting Against Electrostatic DischargePage Overview of the D-Link Unified Access System Link Unified Access System ComponentsLink Wlan Controller Switch Link Access Point Wlan Visualization Link Unified Access System Topology Single WCS Deployment Peer Switch WCS Deployment Single WCS with Layer 2 Roaming Support Understanding the User Interfaces Peer WCS with Layer 3 Roaming Support Using the Web Interface Web Interface Layout Interface Configuration Graphic Navigation Menu Wlan Tabs Using the Command-Line InterfaceConfiguration and Monitoring Options Tools Menu Using Snmp Wireless System Features and Standards Support Tkip AES & Ccmp CLI Syslog Tftp Planning the D-Link Unified Access System Network System Requirements Link Unified Access System Components Wlan Topology Considerations Wiring Closet Topology Access Point-to-Switch Discovery Access Point Placement Network Planning to Support Layer 3 Roaming Inter-Subnet Roaming Installing the Hardware Hardware Overview LED Indicators Front Panel Components For Link/Act/Speed Mode PowerPoE Mode For PoE Mode 10GE Port LEDs Rear Panel DescriptionSide Panels Combo SFP Ports Installation Package ContentsInstallation Guidelines Installing the Switch without the Rack Installing the Switch in a Rack Powering On the Switch Installing the SFP portsPower Failure Installing the Optional Module Inserting the Fiber-Optic Transceivers into the Switch Install the Module Front Panel of the DEM-410X Connecting the Switch Connecting to the External Redundant Power System Connecting the Switch to the Network Connecting the Switch and AP Directly Connecting the Switch and AP through the L2/L3 Network Connecting to the Core Network Installing the D-Link Unified Access System System Deployment OverviewPage Connecting the Switch to the Network Enabling the Wlan Features on the Switch Field Description IP Address Disable ReasonAP Authentication AP MAC Validation Preparing the Access Points Logging on to the AP Changing the AP Password Configuring 802.1x Authentication Information on the AP Configuring AP-to-Switch Authentication Information Configuring Vlan Information on the Access PointAction Command Discovering Access Points and Peer Switches Understanding the Discovery MethodsExample 1 L2 Discovery Example 2 IP Address of AP Configured in the Switch L2 Discovery Example Example 3 IP Address of Switch Configured in the AP Example 4 Dhcp Option Discovery and Peer Switches Assigning the IP Address to Switches and Managed APs Link Wlan Controller Switch with Routing Disabled Link Wlan Controller Switch with Routing Enabled Switch-prompt Interface 0/2#ip address 192.168.1.24 Enabling the AP and Peer Switch Discovery Link Access Point Link Wireless Device Discovery Protocol Configuring IP Addresses of Peers and APs in the Switch L3/IP Discovery IP ListIP Address Range Setting the Switch IP Address in the D-Link Access Point WLAN-AP#get managed-ap Setting the Switch Information in the Dhcp Option Options Authenticating and Validating Access Points Configuring AP Authentication Using the Local Database for AP Validation Requiring AP Authentication Installing the D-Link Unified Access System Using the Radius Database for AP Validation Set the Radius server as the validation method Managing Failed or Rogue APs Configuring Access Point Settings Access Point ProfilesAP Profiles, Networks, and the Local Database Local Access Point Database Networks Secret Configuring AAA and Radius SettingsGlobal Radius Server Accounting Default Action Configuring Wireless Radio SettingsMAC Authentication MAC List Radio Settings Dynamic Turbo StateSuper a Super G RTS Threshold Basic RF Scan SentryRate Sets Supported Automatic Dtim PeriodBeacon Period Channel Advanced Radio Configuration Automatic PowerInitial Power RF Scan Duration Configuring Ssid Settings Managing Virtual Access Point Configuration Configuring the Default Network Configuring Network Settings Wireless Network Configuration L3 Tunnel Subnet AuthenticationL3 Tunnel Status L3 Tunnel Mask Radius Secret Enabling and Configuring Additional VAPsAddress None Configuring a VAP for L3 Tunnels Networks Available to the Wireless Client L3 Roaming Example Configuring AP Security Using No Security Using Static or Dynamic WEP Static WEP Configuration Static WEP Field Description Using WPA/WPA2 Personal or Enterprise WPA Personal Configuration Static WPA Field Description Configuring Valid Access Point Settings Static WPA FieldDescription Location Valid Access Point SummaryManaged Mode Profile Valid AP Configuration Password APs operate Page Managing and Maintaining D-Link Access Points Resetting the Access Points Managing Radio Frequency Settings Configuring Channel Plan and Power Settings RF Channel Plan and Power Configuration History Depth RF Channel Plan and Power AdjustmentChannel Plan Interval Viewing the Channel Plan History Channel Plan History Initiating Manual Channel Plan Assignments Initiating Manual Power Adjustments Manual Power Adjustments Server Address Upgrading the Access Point SoftwareAP Upgrade Field Description File Path Group Size Managed AP Download Count Performing Advanced Access Point ManagementStatus Success Count Enabling AP Debugging Debug Adjusting the Channel and Power AP Debug Field Description Power Status Page Monitoring Wireless Global Information Monitoring Status and Statistics Managed Access Peer SwitchesTotal Access Global Wlan Statistics Monitoring Status and Statistics Monitoring Peer Switch Status Viewing IP Discovery Status Monitoring All Access Points Firmware Version Monitoring All Access PointsAuthenticated Clients Monitoring Managed Access Point Status Managed Access Point Status Viewing Detailed Managed Access Point Status Configuration Detailed Managed Access Point Status Viewing Managed Access Point Radio Summary Information Managed AP Radio Summary Viewing Detailed Managed Access Point Radio InformationTransmit Power Managed AP Radio Detail Viewing Managed Access Point Neighbor APs Ex -802.11g Viewing Clients Associated with Neighbor Access PointsManaged AP Neighbor Status Neighbor AP MAC Viewing Managed Access Point VAPs Neighbor AP ClientsNeighbor Client Monitoring Managed AP Statistics Managed Access Point Wlan Summary Statistics Viewing Managed Access Point Ethernet StatisticsViewing Detailed Managed Access Point Statistics Managed Access Point Ethernet Summary Statistics Viewing Managed Access Point Radio Statistics Viewing Managed Access Point VAP Statistics Viewing Access Point Authentication Failure Status Authentication Failed AP Status Monitoring Rogue and RF Scan Access Points RF Scan Monitoring Associated Client Information Viewing Associated Client Status Associated Client Status SummaryTunnel IP Address Viewing Detailed Associated Client Status Viewing Associated Client Ssid Status Viewing Associated Client Neighbor AP StatusAssociated Client Neighbor AP Status Viewing Associated Client VAP Status Viewing Associated Client Statistics Associated Client Association Detail Statistics Associated Client Association Summary StatisticsAssociated Client Summary Statistics Transmit Retries Duplicates Received Viewing Client Authentication Failure StatusTransmit Retries Failed Associated Client Session Detail Statistics Client Authentication Failure Status Failed Client Status Authentication Failure Count Monitoring and Managing Ad Hoc ClientsAssociation Failure Count Ad Hoc Clients Ad Hoc Client Status Detection Mode Configuring Advanced Settings Creating, Configuring, and Managing AP Profiles Multiple AP Profiles Creating, Copying, and Deleting AP Profiles Adding a Profile Applying an AP Profile Applying the AP Profile Configuring Global Settings Client Failure Enabling Snmp TrapsAP Failure Status RF Scan Status Snmp Traps Field Description Configuring QoS QoS Configuration Maximum Contention QoS SettingsMinimum Contention Queue WMM Mode Max. Burst Length Txop Limit Page Visualizing the Wireless Network Importing and Configuring a Background Image Click Wlan Visualization Download Image Setting Up the Graph Components Creating a New Graph Importing and Configuring a Background Image on With a graph definition length of 800 feet Graphing the Wlan Components Multiple Graphs Component Tool Tip Menu Item Description Understanding the Menu Bar OptionsWlan Visualization Menu Bar Options File View On page 166 shows the difference between the tab view Options Help Sentry Mode Detailed View Tool Tip for Radio Managed AP Information Managing the Graph Component Attributes Links/CommandsPeer Switch Component Information Wireless Client Other AP Link Unified Access System Default Settings Default D-Link Wlan Controller Switch SettingsFeature Default Default D-Link Access Point Profile Settings AP Default AP Profile SettingsWlan Information Link Unified Access System Default Settings Virtual Access Point and Network Settings Other Settings Radius Attributes for the Access Point Configuring the External Radius ServerConfiguring Radius Settings for Access Points Radius Server Description Range Usage Attribute Radius Server Description Range Usage Attribute FreeRADIUS Server Configuration Example Configuring Radius ClientsCreating and Including an Attribute Dictionary Vendor Adding Access Points to the Valid AP Database Configuring Radius for Client MAC Authentication Configuring Radius Settings for Wireless ClientsFreeRADIUS Example for Wireless Client Configuration Radius Attributes for Wireless Clients Configuring User-Based Authentication and Dynamic VLANs Configuring MAC Authentication Configuring the Wlan and Tunnel Interfaces L3 Roaming Example Using a Loopback Interface for the Wireless Functions Creating the Vlan Routing Interface Create a Vlan routing interface on Vlan L3 Roaming Example Configuring the L3 Tunnel Network Example of Configuring L3 Roaming by Using the CLI Configured L3 Tunnel Status ValuesL3 Tunnel Status Description Switch-prompt#wireless ap profile apply Example of Configuring L3 Roaming by Using the Web Interface Configuring Dhcp Relay and the Dhcp Server Configuring the Relay Agent Configuring the Dhcp Server Configure the default router for the address pool L3 Roaming Example Setting the MTU Size Setting the MTU Size Page Understanding Quality of Service QoS and Load Balancing802.11e and WMM Standards Support Coordinating Traffic Flow QoS Queues and Dscp on Packets Edcf Control of Data Frames and Aifs Random Backoff and Contention Windows Packet Bursting for Better Performance Txop Interval for Client Stations 802.1p and Dscp tags Vlan Priority Tags Vlan Priority Dscp Value Warranty and Registration Information All countries and regions excluding USA Warranties Exclusive Limited Warranty HardwareSoftware Limited Warranty USA Only Limited Warranty USA Only Page Warranty and Registration Information Trademarks Link Europe Limited Product WarrantyProduct Registration Copyright Statement Geographical Scope of the Limited Product Warranty Limitation of Product Warranty Limited Product Warranty Period Performance of the Limited Product WarrantyProduct Type Product Warranty Period Link Europe Limited Produktgarantie Warrantor Räumlicher Geltungsbereich der eingeschränkten Garantie Einschränkung der GarantieLaufzeit der eingeschränkten Garantie Leistungsumfang der eingeschränkten Garantie GarantiegeberProdukttyp Gewährleistungslaufzeit Link Europe a limité la garantie des produits Etendue géographique de la Garantie Produit Limitée Limitation de la Garantie Produit Période de Garantie Produit LimitéeType de produit Période de Garantie Garantía limitada del producto D-LINK Europa Exécution de la Garantie Produit LimitéeGarant Cobertura geográfica de la garantía limitada del producto Limitación de la garantía del producto Período de la garantía limitada del producto Uso de la garantía limitada del productoTipo de producto Período de garantía del Producto Link Europe Termini di Garanzia dei Prodotti Garante Ambito geografico della Garanzia limitata Limitazione della GaranziaPeriodo di garanzia Prestazioni della Garanzia limitata Londra NW9 5 AB Regno Unito Telefono +44-020-8731-5555Page Technical Support Technical Support Technical Support Technische Unterstützung Assistance technique Asistencia Técnica Supporto tecnico Tech Support for customers within the Netherlands Pomoc techniczna Technická podpora Technikai Támogatás Teknisk Support Link teknisk support på Internettet Teknistä tukea asiakkaille Suomessa Teknisk Support för kunder i Sverige Tech Support for customers within Australia Suporte Técnico Τεχνική Υποστήριξη Emailsupport@dlink.com.sg Tech Support for customers within India Tech Support for customers within the Russia Technical Support Emailsupport@d-link.co.za Tech Support for Latin America customers Техническая поддержка Asistencia Técnica Suporte Técnico 技术支持友冠技術支援 International Offices Europe U. K Registration Information Product Model Product Serial No Registration Information