cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
372
Views
0
Helpful
3
Replies

1200 WAP- MAC address authentication without RADIUS server

srokusek
Beginner
Beginner

We have a relatively small wireless network (about 40 1200 WAP's). Right now, our wireless is open, no restriction at all. Our goal is to allow access to the wireless for only authorized users instead of just anyone who wanders within range. We don't have a need for the security levels of LEAP or PEAP, and we don't want to require everyone to buy a new wireless card if they don't currently have a Cisco card. Can we combine WEP with MAC access lists? If so, can we do that without a RADIUS server? From the documentation that I have been reading, a RADIUS server is used for much higher levels of security than what we will be implementing.

Maybe there is another solution that is better for us that I am just not identifying. Any help/suggestions would be greatly appreciated!

Thanks-

Sonia

3 Replies 3

gamccall
Enthusiast
Enthusiast

Yes, you can use static WEP and/or MAC filtering without needing a AAA server. Be aware that it's trivial to spoof a MAC address, and that it's possible to break static WEP relatively quickly depending on your volume of wireless traffic. The two together should keep out bored kids, but will not protect you from a determined attack.

ctripp
Beginner
Beginner

Hi Sonia,

If you are running IOS access points and 12.2(15)JA, you can setup one Access Point to function as a local radius server that does mac authentication.

One centralized entry point for your Mac addresses instead of entering them on every one.

Regards,

Charlie

Yes we are running 12.2(15)JA. I am very interested in this. Would this limit us to approximately 50 users? If so, this wouldn't work. If it doesn't limit us, this would work great!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers