D-Link DWS-3024L User Manual - Page 152

D-Link Unified Access System User Manual To view a list of clients that fail to associate or authenticate with the a D-Link Access Point, click the Failed Clients page. Figure 66. Client Authentication Failure Status To delete all clients from the list, click Delete All. To block a failed client from WLAN access, select the check box next to the MAC address of the client and click Deny MAC. The MAC address is added to the MAC Authentication Deny MAC List for all AP Profiles where the default action is Deny. To add the client to the MAC Authentication Allow MAC List for all profiles where the default action is Allow, select the client and click Allow MAC. You must re-apply the AP profiles in order for the changes to be applied to the APs. NOTE: If the Deny MAC button is not available, it means all profiles use Allow as the default MAC Authentication action. Likewise, if the Allow MAC button is not available, no profiles have an Allow default action. NOTE: If you use RADIUS for MAC authentication in one or more AP profiles, you must add the MAC Address to the RADIUS database. Table 50 shows the fields on the summary page for failed client status. Table 50. Failed Client Status Field MAC Address BSSID SSID Last Failure Type Age Description The Ethernet address of the client. The managed AP VAP Ethernet MAC address on which the client attempted to associate and/or authenticate. The network SSID on which client attempted to associate and/ or authenticate. Indicates the last type of failure that occurred, which can be Authentication or Association. Time since failure occurred. Click the MAC address of the failed client to view additional information about a client. NOTE: If a wrong password is entered on a client for WEP, this page may not list that authentication failed client. This issue actually arises from a known problem with the IEEE 802.11 specification. The specification says that if the AP is unable to decode the third frame (containing the encrypted challenge text), it should send an unsuccessful result. However, if the AP is unable to decode a WEP frame, it does not know whether that frame is actually the third frame, or even a Shared Key frame at all, and does not send a result. This issue only 152 © 2001- 2008 D-Link Corporation. All Rights Reserved.