MSM7xx Controllers Configuration Guide v6.4.0

For more information,
see ...
The Use controller for option in a VSC is set to:
Auth type
Neither
Authentication and
Access control
Authentication
“Configuring
HTML-based
Not supportedWireless users
authenticated via:
Not supportedHTML-based
authentication on a
VSC” (page 348).
• Local user accounts
on the controller
• External RADIUS
server
• Active Directory
“Configuring
VPN-based
Not supportedWireless + wired*
users authenticated
via:
Not supportedVPN-based
authentication on a
VSC” (page 350)
• Local user accounts
on the controller
• External RADIUS
server
• Active Directory
“No authentication”
(page 350).
Wireless + wired
users*
No authentication
* Wired users are only supported on the default VSC, unless their traffic is on a VLAN that matches
the VSC ingress defined on another VSC. (On a controller team, wired users are only supported
via the HP 517 or MSM317 switch ports.)
Other access control methods
Although not authentication options, the following features can also be used to limit access to the
network.
For more information, see ...Applies toFeature
“Configuring global MAC lockout”
(page 344).
Wireless/wired users connected via:MAC lockout (Global)
• Wireless ports on controlled APs
• Wired ports (including switch ports) on controlled
APs
• Local mesh ports on controlled APs
• The LAN port on the controller
MAC lockout does not apply to the Internet port
(Internet network on the MSM720) on the controller.
“MAC-based filtering” (page 340).Wireless users connected via wireless ports on
controlled APs.
Wireless MAC filter (VSC)
“Configuring MAC-based filters on
a VSC” (page 344).
“Configuring MAC-based filters on
an HP 517 or MSM317 switch
port” (page 345).
“Wireless IP filter” (page 134).Wireless users connected via wireless ports on
controlled APs.
Wireless IP filter (VSC)
Using more than one authentication type at the same time
For added flexibility, you can enable multiple authentication types on a VSC at the same time to
support users with different needs. How this works depends on setting of the Use Controller for
332 User authentication, accounts, and addressing