Advanced security – Rockwell Automation 1783-WAPxxx Stratix 5100 Wireless Access Point User Manual User Manual
Page 132
132
Rockwell Automation Publication 1783-UM006A-EN-P - May 2014
Chapter 4
Stratix 5100 Device Manager Parameter Definitions
Advanced Security
You can set up the access point to authenticate client devices using a combination
of MAC-based and EAP authentication, see
.
When you enable this feature, client devices that associate to the access point
using 802.11 open authentication first attempt MAC authentication.
• If MAC authentication succeeds, the client device joins the network.
• If the client is also using EAP authentication, it attempts to authenticate
using EAP. If MAC authentication fails, the access point waits for the
client device to attempt EAP authentication.
Figure 56 - MAC Address Authentication Page
Table 41 - MAC Address Authentication Page Parameter Descriptions
Parameter
Description
MAC Addresses Authenticated by
Local list only
• If you want the authentication to be stored on the access point, choose Local List Only and enter MAC addresses.
Authentication Server Only
• If you want the authentication to be stored on the server, choose the Authentication Server Only option.
Authentication Server if not found in Local List
• Choose Authentication Server if not found in Local List if you want to try MAC authentication list first and then
automatically try the Authentication server list. If the authentication succeeds, the client joins the network.
Local List if no response from Authentication Server
• You are required to select at least one MAC Authentication on the Server Manager page if you select either Authentication
Server Only or Authentication Server if not found in Local List.
Local MAC Address List
Local List
• The MAC addresses appear in the Local List. The MAC addresses remain in the management system until you remove
them. To remove the MAC address from the list, select it and click Delete.
New MAC Address: HHHH.HHHH.HHHH
• If you need to enter a new MAC address, type the address with periods separating the three groups of four characters, for
example, 40.9612.3456.
• To make sure the filter operates properly, use lower case for all the letters in the MAC addresses that you enter. Click Apply
to put the MAC address in the management system. You must also enable MAC address authentication on the SSID
Manager page. You can navigate to the Association page to verify that the preconfigured clients were associated and
authenticated.