DellPowerConnectW-SeriesArubaOS6.2 | User Guide MAC-basedAuthentication | 189
Chapter 13
MAC-based Authentication
This chapter describes how to configure MAC-based authentication on the Dell controller using the WebUI.
Use MAC-based authentication to authenticate devices based on their physical media access control (MAC)
address. While not the most secure and scalable method, MAC-based authentication implicitly provides an addition
layer of security authentication devices. MAC-based authentication is often used to authenticate and allow network
access through certain devices while denying access to the rest. For example, if clients are allowed access to the
network via station A, then one method of authenticating station A is MAC-based. Clients may be required to
authenticate themselves using other methods depending on the network privileges required.
MAC-based authentication can also be used to authenticate Wi-Fi phones as an additional layer of security to
prevent other devices from accessing the voice network using what is normally an insecure SSID.
This chapter describes the following topics:
l "Configuring MAC-Based Authentication" on page 189
l "Configuring Clients" on page 190
Configuring MAC-Based Authentication
Before configuring MAC-based authentication, you must configure
:
l The user role that will be assigned as the default role for the MAC-based authenticated clients. (See Roles and
Policies on page 296 for information on firewall policies to configure roles).
You configure the default user role for MAC-based authentication in the AAA profile. If derivation rules exist or
if the client configuration in the internal database has a role assignment, these values take precedence over the
default user role.
l Authentication server group that the controller uses to validate the clients. The internal database can be used to
configure the clients for MAC-based authentication. See "Configuring Clients" on page 190 for information on
configuring the clients on the local database. For information on configuring authentication servers and server
groups, see Authentication Servers on page 168
Configuring the MAC Authentication Profile
Table 58 describes the parameters you can configure for MAC-based authentication.
Parameter Description
Delimiter Delimiter used in the MAC string:
l colon specifies the format xx:xx:xx:xx:xx:xx
l dash specifies the format xx-xx-xx-xx-xx-xx
l none specifies the format xxxxxxxxxxxx
Default: none
Table 58:
MAC Authentication Profile Configuration Parameters
