MSM7xx Controllers Configuration Guide v6.4.0

Configuring MAC-based authentication on a VSC
Each VSC can have unique settings for MAC authentication of wireless client stations. These settings
are defined on the VSC profile page. (To open this page, see “Viewing and editing VSC profiles”
(page 112)).
• When the Use Controller for Authentication option is enabled under Global, MAC-based
authentication tasks are managed by the controller. APs forward all authentication requests
to the controller which validates user login credentials using the local user accounts or a
third-party RADIUS server. (If the Access control option is also enabled, then MAC-based
authentication cannot be used as the same time as HTML-based user logins.)
• When the Use Controller for Authentication option is disabled under Global, MAC-based
authentication tasks are managed by the AP. The AP uses the services of a third-party RADIUS
server (configured by defining a RADIUS profile on the Controller >> Authentication > RADIUS
profiles page) to validate user login credentials.
NOTE: Reauthentication of client stations does not automatically occur upon session timeout.
Authentication
Local
User logins are authenticated with the list defined on the Controller >> Users > User accounts
page. Define both the username and password as the MAC address of the device. Use the
MAC address format defined on the Controller >> Authentication > MAC format page. See
“Configuring MAC address format” (page 347).
Remote
User logins are authenticated via an external RADIUS server. To define the connection to an
external RADIUS server, go to the Controller >> Authentication > RADIUS profiles page.
To successfully authenticate a client station, an account must be created on the RADIUS server
with both username and password set to the MAC address of the client station.
342 User authentication, accounts, and addressing