ZyAIR G-2000 Plus User’s Guide

 

Table 30 Wireless: 802.1x and No WEP

 

 

 

 

 

LABEL

DESCRIPTION

 

 

 

 

 

 

Authentication

The authentication database contains wireless station login information. The

 

 

Databases

trusted user database is the built-in database on the ZyAIR. The RADIUS is an

 

 

 

external server. Use this drop-down list box to select which database the ZyAIR

 

 

 

should use (first) to authenticate a wireless station.

 

 

 

Before you specify the priority, make sure you have set up the corresponding

 

 

 

database correctly first.

 

 

 

Select Local User Database Only to have the ZyAIR just check the built-in

 

 

 

trusted user database on the ZyAIR for a wireless station's username and

 

 

 

password.

 

 

 

Select RADIUS Only to have the ZyAIR just check the user database on the

 

 

 

specified RADIUS server for a wireless station's username and password.

 

 

 

Select Local first, then RADIUS to have the ZyAIR first check the trusted user

 

 

 

database on the ZyAIR for a wireless station's username and password. If the

 

 

 

user name is not found, the ZyAIR then checks the user database on the

 

 

 

specified RADIUS server.

 

 

 

Select RADIUS first, then Local to have the ZyAIR first check the user

 

 

 

database on the specified RADIUS server for a wireless station's username and

 

 

 

password. If the ZyAIR cannot reach the RADIUS server, the ZyAIR then checks

 

 

 

the trusted user database on the ZyAIR. When the user name is not found or

 

 

 

password does not match in the RADIUS server, the ZyAIR will not check the

 

 

 

trusted user database and the authentication fails.

 

 

Apply

Click Apply to save your changes back to the ZyAIR.

 

 

 

 

 

 

Reset

Click Reset to reload the previous configuration for this screen.

 

 

 

 

 

7.16 MAC Filter

The MAC filter screen allows you to configure the ZyAIR to give exclusive access to up to 32 devices (Allow Association) or exclude up to 32 devices from accessing the ZyAIR (Deny Association). Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC address of the devices to configure this screen.

To change your ZyAIR’s MAC filter settings, click the WIRELESS link under ADVANCED and then the MAC Filter tab. The screen appears as shown.

Chapter 7 Wireless Security

112