3Com 3CRWE825075A-US User Guide - Page 34

Access Point 802.1x Authentication to Network, Local MAC Authentication

Page 34 highlights

Field Default Broadcast Key Refresh Rate 0 (minutes) Session Key Refresh Rate 0 (minutes) 802.1x Reauthentication Refresh Rate 0 (seconds) Description Defines how long the RADIUS server will refresh the primary broadcast key. Defines how long the RADIUS server will dynamically re-assign a session key to a connected client station. Defines the time interval in which the Access Point forces a Reauthentication and subsequently re-issues a new session key. o Access Point 802.1x Authentication to Network-802.1x can also be enabled on the ethernet port of the switch that the access point's ethernet cable is plugged into. Having 802.1x enabled on the switch prevents any device that is not able to successfully authenticate from being able to use the ethernet port. This option is useful if your access point is located in an insecure location, and you want to prevent someone who plugs a computer or another access point into the network connection being used by your access point from being able to access the network. This feature defaults to being disabled. If "MD5 Authentication to Network with MAC Address" is selected, the access point's MAC address will be used for both the username and password. For example, an access point with the MAC Address 12-34-56-78-9A-BC would use a username and password of "123456789abc". If "MD5 Authentication to Network with Supplied Username and Password" is selected, the access point with authenticate using the username and password supplied. If you press the "Apply" button when no password is specified, the previous password will continue to be the one used. You must enter the same password twice to successfully change the password. o Local MAC Authentication-Client computers can be filtered using the unique MAC addresses of their network cards. To build the MAC Authentication Table, enter a MAC address in the space provided, choose the permission, and click Update. MAC addresses are listed in the MAC Authentication Table in the order that they were entered. The Local MAC Authentication parameters are described in the following table: Parameter System Default Description Define the default filtering setting as Deny or Allow. 34

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64

34
o
Access Point 802.1x Authentication to Network
—802.1x can also be enabled on
the ethernet port of the switch that the access point’s ethernet cable is plugged into.
Having 802.1x enabled on the switch prevents any device that is not able to
successfully authenticate from being able to use the ethernet port. This option is
useful if your access point is located in an insecure location, and you want to
prevent someone who plugs a computer or another access point into the network
connection being used by your access point from being able to access the network.
This feature defaults to being disabled.
If “MD5 Authentication to Network with MAC Address” is selected, the access
point’s MAC address will be used for both the username and password. For
example, an access point with the MAC Address 12-34-56-78-9A-BC would use a
username and password of “123456789abc”.
If “MD5 Authentication to Network with Supplied Username and Password” is
selected, the access point with authenticate using the username and password
supplied. If you press the “Apply” button when no password is specified, the
previous password will continue to be the one used. You must enter the same
password twice to successfully change the password.
o
Local MAC Authentication
—Client computers can be filtered using the unique
MAC addresses of their network cards. To build the MAC Authentication Table,
enter a MAC address in the space provided, choose the permission, and click
Update.
MAC addresses are listed in the MAC Authentication Table in the order
that they were entered. The Local MAC Authentication parameters are described in
the following table:
Field
Default
Description
Broadcast Key Refresh Rate
0
(minutes)
Defines how long the RADIUS server will
refresh the primary broadcast key.
Session Key Refresh Rate
0
(minutes)
Defines how long the RADIUS server will
dynamically re-assign a session key to a
connected client station.
802.1x Reauthentication
Refresh Rate
0
(seconds)
Defines the time interval in which the Access
Point forces a Reauthentication and
subsequently re-issues a new session key.
Parameter
Description
System Default
Define the default filtering setting as Deny or Allow.