MAC Authentication

Media Access Control (MAC) authentication is used to authenticate devices based on their physical MAC addresses. It is an early form of filtering. MAC authentication requires that the MAC address of a machine must match a manually defined list of addresses. This form of authentication does not scale past a handful of devices, because it is difficult to maintain the list of MAC addresses. Additionally, it is easy to change the MAC address of a station to match one on the accepted list. This spoofing is trivial to perform with built-in driver tools, and it should not be relied upon to provide security.

MAC authentication can be used alone, but typically it is combined with other forms of authentication, such as WEP authentication. Because MAC addresses are easily observed during transmission and easily changed on the client, this form of authentication should be considered nothing more than a minor hurdle. It is recommended that you do not use the MAC-based authentication.

Configuring MAC Authentication

To enable MAC Authentication for a wireless network:

1.

In the Network tab, click the network for which you want to enable MAC authentication. The edit link for the network appears.

2.

Click the edit link and navigate to the Security tab.

3.

For a network with Personal or Open security level, select Enabled from the MAC authentication drop-down list.

4.

Click OK to continue.

Figure 100 - Configuring MAC Authentication

5.

Click Next and then click Finish to apply the changes.