MSM7xx Controllers Configuration Guide v6.4.0

Location-aware
This option enables you to control logins to the public access network based on the AP, or group
of APs, to which a user is connected. It is automatically enabled when a VSC is set to Access
control.
Location-aware is always enabled when using the controller for authentication or access-control
with a remote RADIUS server.
For each user login, location-aware sends the PHY Type, SSID, and VLAN to the remote RADIUS
server. It also includes the specified Called-Station-Id content. For more information, see
“Location-aware authentication” (page 432).
Wireless MAC filter
This option enables you to control access to the wireless network based on the MAC address of a
device. Select the MAC address list to use. Each list can contain up to 256 MAC addresses. You
can either block access or allow access, depending on your requirements. To configure this option,
see “Configuring MAC-based filters on a VSC” (page 344).
The following table describes how the MAC filter functions when it is used alone and in combination
with other authentication options:
When used with 802.1X
authentication
When used with MAC-based
authentication
When used
alone
Filter actionClient address
Access is granted or denied based
on result of 802.1X authentication.
Access is granted. MAC-based
authentication is not performed.
Access is
granted.
AllowClient
address is in
the MAC
address list.
Access is denied.Access is denied. MAC-based
authentication is not performed.
Access is
denied.
BlockClient
address is in
the MAC
address list.
VSC configuration options 133