topic Configure Web authentication in Wireless

Configure Web authentication

hussein bakkar — Sun, 04 Jul 2021 05:16:50 GMT

Can we configure the wireless controller 5508 to authenticate the clients using both of MAC address Filtering (layer 2 security) and Web authentication (layer 3 security). and what is the difference between (Web policy --> authentication) and (Web policy --> on MAC filter failure)

Has anyone configured this security feature before ?

Plz advice

Re: Configure Web authentication

fbarboza — Sun, 10 Jun 2012 21:02:47 GMT

Hi,

Here is the link where you can check on the layer 2 and layer 3 compatibility Matrix.

http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a0080987b7c.shtml

Re: Configure Web authentication

Saravanan Lakshmanan — Sun, 10 Jun 2012 22:55:13 GMT

Yes, If a WLAN has both a Layer 2 (mac-filter) and Layer 3 security (webauth-on-macfilter-failure) configured, the client moves to RUN state if either one is passed. And if it fails Layer 2 security (mac-filter), the client is moved to Layer 3 security (webauth-on-macfilter-failure) i.e, when clients fail on MAC filter, they get automatically switched to webAuth.

Web policy --> authentication, it can or can't be used with mac filter, if mac filter enabled then it will be mandatory & can't fail to webauth like above.

Configure Web authentication

hussein bakkar — Mon, 11 Jun 2012 08:40:23 GMT

thanks Fbarboza for reply

actually the link you mentioned above did not open ,, could you plz send another link.

Configure Web authentication

hussein bakkar — Mon, 11 Jun 2012 08:45:53 GMT

thanks Saravanan for ur reply.

in our organization we need to perform double layer of security

firstly a MAC Filter for specific clients and after successfully passed the local filter in Wireless controller, the clients need to perform a web policy authentication by writing the username and password which are configured locally in the wireless controller database too.

is it possible ??

Configure Web authentication

Amjad Abdullah — Mon, 11 Jun 2012 10:33:19 GMT

Salam Hussein,

Yes it is possible.

You can enable mac-filtering on L2 security on the WLAN and webauth (on L3 security) at the same time.

HTH

Amjad

Configure Web authentication

hussein bakkar — Tue, 12 Jun 2012 05:09:57 GMT

thanks alot Amjad..