Data pane item

Description

 

 

within range of 1 to 99 hours and the default value is 24 hours.

 

 

 

 

 

 

MAC

To enable MAC address based authentication for Personal and Open security

 

AUTHENTICATIO

levels, set MAC AUTHENTICATION to Enabled.

 

N

For Enterprise security level, the following options are available:

 

 

• PERFORM MAC AUTHENTICATION BEFORE 802.1X — Select this to use

 

 

802.1X authentication only when the MAC authentication is successful.

 

 

• MAC AUTHENTICATION FAIL-THRU— On selecting this, the 802.1X

 

 

authentication is attempted when the MAC authentication fails.

 

 

 

 

DELIMITER

Specify a character (for example, colon or dash) as a delimiter for the MAC

 

CHARACTER

address string. When configured, the AP uses the delimiter in the MAC authen-

 

 

tication request. For example, if you specify the colon as a delimiter, MAC

 

 

addresses in the xx:xx:xx:xx:xx:xx format are used. If the delimiter is not specified,

 

 

the MAC address in the xxxxxxxxxxxx format is used.

 

 

This option is available only when MAC authentication is enabled.

 

 

 

 

UPPERCASE

Set to Enabled to allow the AP to use uppercase letters in MAC address string for

 

SUPPORT

MAC authentication.

 

 

This option is available only if MAC authentication is enabled.

 

 

 

 

3.Click Next to configure access rules. For more information, see Configuring access rules for a WLAN SSID profile on page 29.

Configuring access rules for a WLAN SSID profile

This section describes the procedure for configuring security settings for employee and voice network only. For information on guest network configuration, see Captive portal for guest access on page 56.

If you are creating a new SSID profile, complete the WLAN Settings and configure VLAN and security parameters, before defining access rules. For more information, see Configuring WLAN settings on page 23, Configuring VLAN settings for a WLAN SSID profile on page 26, and Configuring security settings for a WLAN SSID profile on page 27.

You can configure up to 64 access rules for an employee, voice, or guest network. To configure access rules for a guest network, see Configuring a WLAN SSID for guest access on page 57

To configure access rules for an employee or voice network:1.In Access Rules, select any of the following types of access control:• Unrestricted — Select this to set unrestricted access to the network.

• Network-based— Select Network-basedto set common rules for all users in a network. The Allow any to all destinations access rule is enabled by default. This rule allows traffic to all destinations. To define an access rule:

a.Click (+) icon.b.Select appropriate options in the New Rule pane.c.Click OK.

•Role based — Select Role based to enable access based on user roles. For role-based access control: n Create a user role if required.

29 Wireless configuration

HP Cloud Network Manager User Guide