MAC authentication lets you set up an external or a local access control list (ACL) with MAC addresses of clients to either allow or deny the network access privilege of the specified clients with the wireless controller–managed access point. The settings are applied only to managed access points.
Note:The wireless controller can support an aggregate number of 4096 MAC addresses for all its local ACLs.
Guidelines for External MAC Authentication
Note the following external RADIUS server guidelines:
- For each MAC authentication client, you must configure a policy on the RADIUS server.
- During MAC authentication, the wireless controller sends the following information to the RADIUS server:
-MAC address in the format xx:xx:xx:xx:xx:xx
-User name
-Calling station ID - The wireless controller uses CHAP as the authentication protocol with the RADIUS server.
- You can configure either MAC authentication with an external RADIUS server or network authentication with an external RADIUS server, but not both. That is, if you configure an external RADIUS server with WPA, WPA2, or WPA & WPA2, you cannot use external MAC authentication but are limited to internal MAC authentication.
See the following articles:
- "How do I configure basic local MAC Authenetication Settings for my ProSAFE Wireless Controller WC7600?
- "How do I remove a MAC address from a wireless clients list on my ProSAFE Wireless Controller WC7600?
- "How do I import a MAC List from a file on my ProSAFE Wireless Controller WC7600?
- "How do I configure a Local MAC Authentication Group on my ProSAFE Wireless Controller WC7600?
- "How do I remove a local MAC Authentication Group on my ProSAFE Wireless Controller WC7600?
- "How do I select an ACL for a profile in the Basic Profile Group on my ProSAFE Wireless Controller WC7600?
- "How do I select an ACL for a profile in an Advanced Profile Group on my ProSAFE Wireless Controller WC7600?
Last Updated:10/17/2025
|
Article ID: 25698