Header Only - DO NOT REMOVE - Extreme Networks

Mac-Authenticantion on Identify Wireless

  • 4 March 2015
  • 8 replies
  • 338 views

Hello guys,

How to enable mac-authentication on Identify Wireless?
How do I change the password to mac-auth? Is there a default password?

Thanks again,

Edson Moura

8 replies

Userlevel 7
If you don't use Netsight NAC you need an RADIUS server for MAC auth. which you configure on the controller GUI > VNS > Global > Authentication.

Then you'd enable MAC auth in the WLAN service > VNS > WLAN Services > choose service > Auth&Acct > enable MAC based authentication.
In the field below choose the RADIUS server and Save.

If you use i.e. Windows RADIUS IAS/NPS you'd add the MACs to the active directory.
The password is the MAC address so it's not very secure.
Userlevel 5
Edson,

In your VNS > WLAN services screen under "Auth & Acct" you just need to highlight the radius server and select "Configure". Then in the Radius Parameters window, highlight "MAC" in the top portion, and it will provide a window to set the password in.



Thanks,
Jason
Edson,

In your VNS > WLAN services screen under "Auth & Acct" you just need to highlight the radius server and select "Configure". Then in the Radius Parameters window, highlight "MAC" in the top portion, and it will provide a window to set the password in.



Thanks,
Jason

Thank you, Jason.
Userlevel 7
Edson,

In your VNS > WLAN services screen under "Auth & Acct" you just need to highlight the radius server and select "Configure". Then in the Radius Parameters window, highlight "MAC" in the top portion, and it will provide a window to set the password in.



Thanks,
Jason

Ok now I'm confused 🙂 what does this password do...

If the information in the user manual is correct then that is the shared secret between the controller and the RADIUS.
Is it to create different access policies on the NPS so if the global shared secret is used then policy#1 is choosen and if this shared secret is send then policy#2 is enforced.

Could you please explain... thanks Ron
Edson,

In your VNS > WLAN services screen under "Auth & Acct" you just need to highlight the radius server and select "Configure". Then in the Radius Parameters window, highlight "MAC" in the top portion, and it will provide a window to set the password in.



Thanks,
Jason

I don't need to change the shared secret that will be used to controller-->radius. The shared secret will be the same.

As above (Jason comments), I need to change the password that will be used to authenticate a device by mac-auth using NPS+AD.

tks,

Edson
Userlevel 5
Edson,

In your VNS > WLAN services screen under "Auth & Acct" you just need to highlight the radius server and select "Configure". Then in the Radius Parameters window, highlight "MAC" in the top portion, and it will provide a window to set the password in.



Thanks,
Jason

Ron,
I see what you mean. I have taken a look at the manual and that section (on page 6-24) is incorrect. That password setting is for sending a password to radius for mac authentication.

I will work with our tech writers to correct that.

Thanks,
Jason
Userlevel 7
Edson,

In your VNS > WLAN services screen under "Auth & Acct" you just need to highlight the radius server and select "Configure". Then in the Radius Parameters window, highlight "MAC" in the top portion, and it will provide a window to set the password in.



Thanks,
Jason

Thanks, so I'd authenticate all MACs on this WLAN service with the same password.... good to know.
Hello Ronald,

I'm using NPS.

Is there some way to change the password on controller? Example: In the switches SecureStack it's possible to change the password to mac-auth by Policy Manager?

I'm trying to authenticate a printer.

Thanks,

Edson

Reply