MAC Authentication with Captive Portal Authentication

You can enforce MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication for captive portal A captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users. clients. The following configuration conditions apply to MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. and captive portal A captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users. authentication method:

Configuring MAC Authentication with Captive Portal Authentication

The following procedure describes how to configure the MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication with captive portal A captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users. authentication for a network profile using the WebUI:

  1. In the Configuration > Networks section, click + to create a new network profile or select an existing profile for which you configure internal captive portal A captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users. authentication for a WLAN Wireless Local Area Network. WLAN is a 802.11 standards-based LAN that the users access through a wireless connection. SSID Service Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network. or a wired profile and click Edit.
  1. Select the Security tab and specify the following parameters:
    1. Toggle the MAC authentication switch to enable MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication for captive portal A captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users. users. If the MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication fails, the captive portal A captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users. authentication role is assigned to the client.
    2. In case of a wired profile for employee access, toggle the 802.1X authentication switch to enable. This is in addition to enabling MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication.
    3. In case of a wired profile for guess access, select a profile from the Captive portal profile drop-down list. This is in addition to enabling MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication.
    4. To enforce MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication, go to the Access tab, select Role-based from the Access Rules drop-down list, and toggle the Enforce MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. auth only role switch to enable.
  2. Click Next and then click Finish to apply the changes.

The following CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. commands configure MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication with captive portal A captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users. authentication for a wireless profile:

(Instant AP)(config)# wlan ssid-profile <name>

(Instant AP)(SSID Profile <name>)# type <guest>

(Instant AP)(SSID Profile <name>)# mac-authentication

(Instant AP)(SSID Profile <name>)# captive-portal {<type> [exclude-uplink <types>]|external [Profile <name>] [exclude-uplink <types>]}

(Instant AP)(SSID Profile <name>)# set-role-mac-auth <mac-only>

The following CLI Command-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions. commands configure MAC Media Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. authentication with captive portal A captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users. authentication for a wired profile:

(Instant AP)(config)# wired-port-profile <name>

(Instant AP)(wired ap profile <name>)# type <guest>

(Instant AP)(wired ap profile <name>)# mac-authentication

(Instant AP)(wired ap profile <name>)# captive-portal <type>

(Instant AP)(wired ap profile <name>)# captive-portal {<type> [exclude-uplink <types>]|external [Profile <name>] [exclude-uplink <types>]}

(Instant AP)(wired ap profile <name>)# set-role-mac-auth <mac-only>