MAC-Based Authentication for a WLAN Service

• MAC-based authentication — MAC-based authentication enables network access to be restricted to specific devices by MAC address. The controller queries a RADIUS server for a MAC address when a wireless client attempts to connect to the network.
• MAC-based authentication can be set up on any type of WLAN Service. To set up a RADIUS server for MAC-based authentication, you must set up a user account with UserID=MAC and Password=MAC (or a password defined by the administrator) for each user. Specifying a MAC address format and role depends on which RADIUS server is being used.
• If MAC-based authentication is to be used in conjunction with the 802.1x or Captive Portal authentication, an additional account with a real UserID and Password must also be set up on the RADIUS server.

MAC-based authentication responses may indicate to the controller what VNS a user should be assigned to. Authentication (if enabled) can apply on every roam.