Users Guide

136 | Authentication Dell PowerConnect W-Series Instant Access Point 6.2.0.0-3.2.0.0 | User Guide
4. Select the domain name/URL and click Edit to modify or Delete to remove the entry from the
list.
5. Click OK to apply the changes.
MAC + 802.1X Authentication
This authentication method has the following features:
l MAC authentication must succeed before 802.1X authentication
The administrator is allowed to enable MAC authentication for 802.1X authentication. MAC
authentication shares all the authentication server configurations with 802.1X authentication.
If a wireless or wired client connects to the network, MAC authentication is done first. If MAC
authentication fails, 802.1X authentication will not begin. If MAC authentication succeeds,
802.1X authentication is carried out. If 802.1X authentication succeeds, the client is assigned
an 802.1X authentication role. If 802.1X authentication fails, the client is assigned a deny-all
role or mac-auth-only role.
l MAC authentication only role
Allows an administrator to create a mac-auth-only role (similar to machine-auth-only role
concept) for role-based access rules when MAC authentication is enabled for 802.1X
authentication. The macauth-only role is assigned to a client if MAC authentication succeeds
and 802.1X authentication fails. If 802.1X authentication succeeds, it will be overwritten by
the final role. The mac-auth-only role is primarily used for wired clients.
l L2 authentication fall-through
Allows an administrator to enable the l2-authentication-fallthrough mode. If this option is
enabled and MAC authentication fails, 802.1X authentication is still allowed. If this option is
disabled, 802.1X authentication is not allowed. The l2-authentication-fallthrough mode is
disabled by default.
Configuring MAC + 802.1X Authentication
To configure the MAC+802.1X authentication for a wireless network:
1. In the Network tab, click the network for which you want to enable MAC+802.1X
authentication. The edit link for the network appears.
2. Click the edit link and navigate to the Security tab.
3. For a network with Enterprise level:
a. Select the check box Perform MAC authentication before 802.1X if you want to use
802.1X authentication only when MAC authentication is successful.
b. Select the check box MAC authentication fail-thru if you want to use 802.1X
authentication even when the MAC authentication fails.