Netgear WAC730-Business User Manual - Page 50

Manage MAC Address Filter Profiles in the Local MAC Address Database

Get Netgear WAC730-Business PDF manuals and user guides View all Netgear WAC730-Business manuals
Add to My Manuals
Save this manual to your list of manuals

Page 50 highlights

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual (Continued) Setting Descriptions Secondary Accounting Server IPv4 Address or IPv6 Address Enter the IP address of the secondary RADIUS server for accounting. The secondary RADIUS server is used when the primary RADIUS server is not available. Port Enter the number of the UDP port on the access point that is used to access the secondary RADIUS server for accounting. The default port number is 1813. Shared Secret Enter the shared key that is used between the access point and the secondary RADIUS server during the accounting process. Authentication Settings Reauthentication The interval in seconds after which the supplicant is reauthenticated with the RADIUS server. Time (secs) The default interval is 3600 seconds (1 hour). Enter 0 to disable reauthentication. Update Global Select the check box to allow the global key update, and enter the interval in seconds. The check Key Every box is selected by default, and the default interval is 1800 seconds (30 minutes). Clear the check (secs) box to prevent the global key update. 6. Click the Apply button. Your settings are saved. For information about assigning the configured RADIUS server to a WiFi security profile for MAC address authentication, see step 7 in Configure and Enable WiFi Security Profiles on page 39. Manage MAC Address Filter Profiles in the Local MAC Address Database For increased security, you can restrict access to an SSID by allowing access to only specific computers or WiFi stations based on their MAC addresses. You can restrict access to only trusted computers so that unknown computers cannot connect over WiFi to the access point. MAC address filtering adds an obstacle against unwanted access to your network, but the data broadcast over the WiFi link is fully exposed if you do not also implement WiFi security. Before you can implement MAC address filtering, you must add one or more MAC address filter profiles (which is described in this section) and then assign the profile to a WiFi security profile (see Configure and Enable WiFi Security Profiles on page 39). You can assign the same MAC address filter profile to multiple WiFi security profiles, or you can set up different MAC address filter profiles for different WiFi security profiles. You can manually add MAC addresses to the MAC address filter profile and you can import a list of trusted MAC addresses. The file that you import must satisfy the following requirements: • The file must be a plain-text file with a .txt or .cfg extension. • Entries in the file must be MAC addresses in hexadecimal format with each octet separated by colons, for example 00:11:22:33:44:55. • Entries must be separated with a single space. • The file must contain only MAC addresses, no other information. Configure the WiFi Features and Security 50

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
(Continued)
Descriptions
Setting
Enter the IP address of the secondary RADIUS server for
accounting. The secondary RADIUS server is used when the
primary RADIUS server is not available.
IPv4 Address or IPv6 Address
Secondary
Accounting
Server
Enter the number of the UDP port on the access point that is
used to access the secondary RADIUS server for accounting.
The default port number is 1813.
Port
Enter the shared key that is used between the access point and
the secondary RADIUS server during the accounting process.
Shared Secret
Authentication Settings
The interval in seconds after which the supplicant is reauthenticated with the RADIUS server.
The default interval is 3600 seconds (1 hour). Enter 0 to disable reauthentication.
Reauthentication
Time (secs)
Select the check box to allow the global key update, and enter the interval in seconds.The check
box is selected by default, and the default interval is 1800 seconds (30 minutes). Clear the check
box to prevent the global key update.
Update Global
Key Every
(secs)
6.
Click the
Apply
button.
Your settings are saved.
For information about assigning the configured RADIUS server to a WiFi security profile for MAC address
authentication, see step 7 in
Configure and Enable WiFi Security Profiles
on page 39.
Manage MAC Address Filter Profiles in the Local MAC
Address Database
For increased security, you can restrict access to an SSID by allowing access to only specific computers or
WiFi stations based on their MAC addresses.You can restrict access to only trusted computers so that
unknown computers cannot connect over WiFi to the access point. MAC address filtering adds an obstacle
against unwanted access to your network, but the data broadcast over the WiFi link is fully exposed if you
do not also implement WiFi security.
Before you can implement MAC address filtering, you must add one or more MAC address filter profiles
(which is described in this section) and then assign the profile to a WiFi security profile (see
Configure and
Enable WiFi Security Profiles
on page 39).You can assign the same MAC address filter profile to multiple
WiFi security profiles, or you can set up different MAC address filter profiles for different WiFi security profiles.
You can manually add MAC addresses to the MAC address filter profile and you can import a list of trusted
MAC addresses. The file that you import must satisfy the following requirements:
•
The file must be a plain-text file with a .txt or .cfg extension.
•
Entries in the file must be MAC addresses in hexadecimal format with each octet separated by colons,
for example 00:11:22:33:44:55.
•
Entries must be separated with a single space.
•
The file must contain only MAC addresses, no other information.
Configure the WiFi Features and Security
50
Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual