Filter
Top Products
16-11
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
OL-30644-01
Chapter 16 Configuring Filters
Configuring Filters Using the Web-Browser Interface
In the Corporate Servers section, you can add a new server for your AP. For this:
Step 1 Enter the AP’s IP address in the Server field
Step 2 Enter the same Shared Secret you entered when defining the AP as a RADIUS client in the previous
page.
Step 3 Enter the Authentication Port as 1812.
Step 4 Enter the Accounting Port as 1813.
Step 5 Click Apply to validate.
Step 6 In the Default Server Priorities section, select the AP in the Priority 1 field of the MAC Authentication
priority list.
Step 7 Click Apply to validate.
Using an external RADIUS server for MAC address authentication
When using an external RADIUS server for MAC authentication, enter the external RADIUS server
details in the Security > Server Manager > Corporate Servers section. Also select at least one server
in the Default Server Priorities > MAC Authentication list.
Configuring the SSID for MAC Authentication
Once you have defined a source of MAC addresses and defined the MAC addresses (when using the local
list or the AP internal RADIUS server), you need to configure the target SSIDs to use MAC
authentication. For this:
Step 1 Go to the Security > SSID Manager page.
Step 2 Select or create a new SSID.
Step 3 In the Client Authentication Settings section, select the check boxes for each accepted authentication
method. Then from the corresponding drop-down list, select With MAC Authentication.
Step 4 To use the default method defined in the Security > Advanced Security page and the default servers
defined in Security > Server Manager page (if applicable), click the Use Defaults option in the MAC
Authentication Servers section.
To use servers different from those defined in the Security > Server Manager page, click the Customize
option and then select the servers to use.
The Customize option does not override the configuration from the Security > Advanced Security page
that defines if the local list or the servers should be used. If you configured the AP to use only the internal
list, choosing the Customize option in the SSID page will have no effect. The Customize option is only
targeted at selecting what MAC server to choose, when MAC servers are selected in the
Security > Advanced Security page.
Step 5 Click Apply to validate.