topic RE: Mac-Authenticantion on Identify Wireless in ExtremeWireless (General)

Mac-Authenticantion on Identify Wireless

Edson_Moura — Thu, 05 Mar 2015 01:57:00 GMT

Hello guys,

How to enable mac-authentication on Identify Wireless?
How do I change the password to mac-auth? Is there a default password?

Thanks again,

Edson Moura

RE: Mac-Authenticantion on Identify Wireless

Ronald_Dvorak — Thu, 05 Mar 2015 02:07:00 GMT

If you don't use Netsight NAC you need an RADIUS server for MAC auth. which you configure on the controller GUI > VNS > Global > Authentication.

Then you'd enable MAC auth in the WLAN service > VNS > WLAN Services > choose service > Auth&Acct > enable MAC based authentication.
In the field below choose the RADIUS server and Save.

If you use i.e. Windows RADIUS IAS/NPS you'd add the MACs to the active directory.
The password is the MAC address so it's not very secure.

RE: Mac-Authenticantion on Identify Wireless

Jason1 — Thu, 05 Mar 2015 02:10:00 GMT

Edson,

In your VNS > WLAN services screen under "Auth & Acct" you just need to highlight the radius server and select "Configure". Then in the Radius Parameters window, highlight "MAC" in the top portion, and it will provide a window to set the password in.

Thanks,
Jason

RE: Mac-Authenticantion on Identify Wireless

Edson_Moura — Thu, 05 Mar 2015 02:10:00 GMT

Thank you, Jason.

RE: Mac-Authenticantion on Identify Wireless

Ronald_Dvorak — Thu, 05 Mar 2015 02:10:00 GMT

Ok now I'm confused 🙂 what does this password do...

If the information in the user manual is correct then that is the shared secret between the controller and the RADIUS.
Is it to create different access policies on the NPS so if the global shared secret is used then policy#1 is choosen and if this shared secret is send then policy#2 is enforced.

Could you please explain... thanks Ron

RE: Mac-Authenticantion on Identify Wireless

Edson_Moura — Thu, 05 Mar 2015 02:10:00 GMT

I don't need to change the shared secret that will be used to controller-->radius. The shared secret will be the same.

As above (Jason comments), I need to change the password that will be used to authenticate a device by mac-auth using NPS+AD.

tks,

Edson

RE: Mac-Authenticantion on Identify Wireless

Jason1 — Thu, 05 Mar 2015 02:10:00 GMT

Ron,
I see what you mean. I have taken a look at the manual and that section (on page 6-24) is incorrect. That password setting is for sending a password to radius for mac authentication.

I will work with our tech writers to correct that.

Thanks,
Jason

RE: Mac-Authenticantion on Identify Wireless

Ronald_Dvorak — Thu, 05 Mar 2015 02:10:00 GMT

Thanks, so I'd authenticate all MACs on this WLAN service with the same password.... good to know.

RE: Mac-Authenticantion on Identify Wireless

Edson_Moura — Thu, 05 Mar 2015 02:24:00 GMT

Hello Ronald,

I'm using NPS.

Is there some way to change the password on controller? Example: In the switches SecureStack it's possible to change the password to mac-auth by Policy Manager?

I'm trying to authenticate a printer.

Thanks,

Edson