Configuring MAC authentication on a Cisco Aironet 3602i access point typically involves the following steps using the command-line interface (CLI) via SSH or a serial console connection:
Follow the below mentioned steps..
- Access the Access Point CLI: Connect to the access point’s CLI using an SSH client or a serial console connection.
- Enter Privileged EXEC Mode: Log in to the access point and enter privileged EXEC mode by typing: – enable
- Enter Configuration Mode: Enter global configuration mode by typing:- configure terminal
- Enable MAC Authentication: Enable MAC authentication globally on the access point by typing:- dot11 aaa authentication mac
- Create a MAC Authentication List: Define a MAC authentication list containing the MAC addresses of the devices allowed to connect. You can create a MAC authentication list named “mac-auth-list” by typing:- mac-authentication-list mac-auth-list
- Add MAC Addresses to the List: Add MAC addresses to the MAC authentication list by typing:- mac-address <mac-address> <interface> Replace <mac-address> with the MAC address of the device and <interface> with the interface associated with the access point where the device will connect (e.g., dot11 0 for the radio interface).
- Apply MAC Authentication List to Interfaces: Apply the MAC authentication list to the interface(s) where clients will connect. For example, to apply the MAC authentication list to the radio interface, type: – dot11 association mac-list mac-auth-listExit Configuration Mode: Once you’ve configured MAC authentication, exit configuration mode by typing:- arduino end
- Save Configuration Changes: Save your configuration changes by typing:- arduino write memory.
- Verify Configuration: You can verify your MAC authentication configuration by checking the running configuration and ensuring that the MAC authentication list is applied to the correct interface(s).