Netgear WFS709TP WFS709TP Setup Manual - Page 141

Configuring MAC-Based Authentication, Configuring the WFS709TP

Page 141 highlights

Chapter 9 Configuring MAC-Based Authentication This chapter describes how to configure media access control (MAC) based authentication on the WFS709TP ProSafe Smart Wireless Switch using the browser interface. Use MAC-based authentication to authenticate devices based on their physical MAC address. While not the most secure and scalable method, MAC-based authentication implicitly provides an additional layer of security to authentication devices. MAC-based authentication is often used to authenticate and allow network access through certain devices while denying access to the rest. For example, if users are allowed access to the network via station A, then one method of authenticating station A is MAC-based. Users may be required to authenticate themselves using other methods depending on the network privileges required. MAC-based authentication can also be used to authenticate W-Fi phones as an additional layer of security to prevent other devices from accessing the voice network using what is normally an insecure SSID. This chapter contains the following topics: • "Configuring the WFS709TP" on page 9-1 • "Configuring Users" on page 9-2 Configuring the WFS709TP Before configuring MAC-based authentication on the WFS709TP, you must first configure the authentication server that the WFS709TP uses to validate the users. The internal database can be used to configure the users for MAC-based authentication. See "Configuring Users" on page 9-2 for information on configuring the users on the local database. For information on configuring AAA servers, see Chapter 6, "Configuring AAA Servers". To enable MAC-based authentication on the WFS709TP: 1. Navigate to the Configuration > Advanced > Security > Authentication Methods > MAC Address page (Figure 9-1). 9-1 v1.0, June 2007

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222

9-1
v1.0, June 2007
Chapter 9
Configuring MAC-Based Authentication
This chapter describes how to configure media access control (MAC) based authentication on the
WFS709TP ProSafe Smart Wireless Switch using the browser interface.
Use MAC-based authentication to authenticate devices based on their physical MAC address.
While not the most secure and scalable method, MAC-based authentication implicitly provides an
additional layer of security to authentication devices. MAC-based authentication is often used to
authenticate and allow network access through certain devices while denying access to the rest.
For example, if users are allowed access to the network via station A, then one method of
authenticating station A is MAC-based. Users may be required to authenticate themselves using
other methods depending on the network privileges required.
MAC-based authentication can also be used to authenticate W-Fi phones as an additional layer of
security to prevent other devices from accessing the voice network using what is normally an
insecure SSID.
This chapter contains the following topics:
“Configuring the WFS709TP” on page 9-1
“Configuring Users” on page 9-2
Configuring the WFS709TP
Before configuring MAC-based authentication on the WFS709TP, you must first configure the
authentication server that the WFS709TP uses to validate the users. The internal database can be
used to configure the users for MAC-based authentication. See
“Configuring Users” on page 9-2
for information on configuring the users on the local database. For information on configuring
AAA servers, see
Chapter 6, “Configuring AAA Servers”
.
To enable MAC-based authentication on the WFS709TP:
1.
Navigate to the Configuration > Advanced > Security > Authentication Methods > MAC
Address page (
Figure 9-1
).