Configure Web authentication

[hussein bakkar]

Hi

Can we configure the wireless controller 5508 to authenticate the clients using both of MAC address Filtering (layer 2 security) and Web authentication (layer 3 security). and what is the difference between (Web policy --> authentication) and (Web policy --> on MAC filter failure)

Has anyone configured this security feature before ?

Plz advice

[fbarboza]

Hi,

Here is the link where you can check on the layer 2 and layer 3 compatibility Matrix.

http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080987b7c.shtml

[hussein bakkar]

thanks Fbarboza for reply

actually the link you mentioned above did not open ,, could you plz send another link.

[Saravanan Lakshmanan]

Yes, If a WLAN has both a Layer 2 (mac-filter) and Layer 3 security (webauth-on-macfilter-failure) configured, the client moves to RUN state if either one is passed. And if it fails Layer 2 security (mac-filter), the client is moved to Layer 3 security (webauth-on-macfilter-failure) i.e, when clients fail on MAC filter, they get automatically switched to webAuth.

Web policy --> authentication, it can or can't be used with mac filter, if mac filter enabled then it will be mandatory & can't fail to webauth like above.

[hussein bakkar]

thanks Saravanan for ur reply.

in our organization we need to perform double layer of security

firstly a MAC Filter for specific clients and after successfully passed the local filter in Wireless controller, the clients need to perform a web policy authentication by writing the username and password which are configured locally in the wireless controller database too.

is it possible ??

[Amjad Abdullah]

Salam Hussein,

Yes it is possible.

You can enable mac-filtering on L2 security on the WLAN and webauth (on L3 security) at the same time.

HTH

Amjad

[hussein bakkar]

thanks alot Amjad..