User manual D-LINK DWL-8600AP

[. . . ] Unified Access Point (AP) Administrator’s Guide Product Model : DWL-8600AP Unified Wired & Wireless Access System Release 1. 0 December 2009 ©Copyright 2009. All rights reserved. D-Link UAP Software User Manual 12/10/09 Software User Manual 12/10/09 D-Link UAP TABLE OF CONTENTS Section 1: About This Document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Document Organization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Additional Documentation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Each wireless network interface card (NIC) used by a wireless client has a unique MAC address. You can use the Administrator UI on the AP or use an external RADIUS server to control access to the network through the AP based on the MAC address of the wireless client. To control access, you configure a global list of MAC addresses locally on the AP or on an external RADIUS server. Then, you set a filter to specify whether the clients with those MAC addresses are allowed or denied access to the network. When a wireless client attempts to associate with an AP, the AP looks up the MAC address of the client in the local Stations List or on the RADIUS server. On the VAP page, the MAC Authentication Type setting controls whether the AP uses the station list configured locally on the MAC Authentication page or the external RADIUS server. The Allow/Block filter setting on the MAC Authentication page determines whether the clients in the station list (local or RADIUS) can access the network through the AP. For more information about setting the MAC authentication type, see “Virtual Access Point Settings” on page 46. CONFIGURING A MAC FILTER AND STATION LIST ON THE AP The MAC Authentication page allows you to control access to UAP based on MAC addresses. Based on how you set the filter, you can allow only client stations with a listed MAC address or deny access to the stations listed. When you enable MAC Authentication and specify a list of approved MAC addresses, only clients with a listed MAC address can access the network. If you specify MAC addresses to deny, all clients can access the network except for the clients on the deny list. To enable filtering by MAC address, click the MAC Authentication tab. Figure 14: Configuring MAC Authentication Page 60 Controlling Access by MAC Authentication 34CSFP6XXUAP-SWUM100-D13 Software User Manual 12/10/09 D-Link UAP Note: Global MAC Authentication settings apply to all VAPs on both radios. Table 23 describes the fields and configuration options available on the MAC Authentication page Table 23: MAC Authentication Field Filter Description To set the MAC Address Filter, select one of the following options: • Allow only stations in the list. Any station that is not in the Stations List is denied access to the network through the AP. Only the stations that appear in the list are denied access to the network through the AP. Note: The filter you select is applied to the clients in the station list, regardless of whether that station list is local or on the RADIUS server. This is the local list of clients that are either permitted or denied access to the network through the AP. To add a MAC Address to the local Stations List, enter its 48-bit MAC address into the lower text boxes, then click Add. To remove a MAC Address from the Stations List, select its 48-bit MAC address, then click Remove. The stations in the list will either be allowed or denied access based on how you set the filter in the previous field. Note: If the MAC authentication type for the VAP is set to Local, the AP uses the Stations List to permit or deny the clients access to the network. If the MAC authentication type is set to RADIUS, the AP ignores the MAC addresses configured in this list and uses the list that is stored on the RADIUS server. The MAC authentication type is set on the VAP configuration page. Stations List Note: After you configure local MAC Authentication settings, you must click Apply to apply the changes and to save the settings. [. . . ] Use 1. 3. 6. 1. 4. 1. 6132. 1. 1. 28. 10. 3. 1. 6. 1. 4. 97. 99. 108. 49. 1 to set apQosAclRuleSrcProtocol to a value of 80 (HTTP). Use 1. 3. 6. 1. 4. 1. 6132. 1. 1. 28. 10. 3. 1. 16. 1. 4. 97. 99. 108. 49. 1 to set apQosAclRuleCommit to a value of 1 (true), which saves the rule. 5. Add another rule to acl1 that allows all traffic from the host with an IP address of 192. 168. 1. 23. • • • • Use 1. 3. 6. 1. 4. 1. 6132. 1. 1. 28. 10. 3. 1. 14. 1. 4. 97. 99. 108. 49. 2 to set the apQosAclRuleStatus of Rule 2 to active (1) Use 1. 3. 6. 1. 4. 1. 6132. 1. 1. 28. 10. 3. 1. 4. 1. 4. 97. 99. 108. 49. 2 to set the apQosAclRuleSrcIpAddress to a value of 192. 168. 1. 23. [. . . ]