asked on 2/27/2007

Dumb question, we have (3) Cisco 1240AG access points.

We've placed them on the east,center, and west side of the floor. I'm curious how I can get all 2 (east and west) to share the center AP local Mac. address list. We are already using EAP but wanted to put in place local Mac Authentication. I'm curious if I was to set the center AP as a Root Bridge mode would that solve the problem. Didn't want to create a Mac Authentication Server as of yet. Also don't want to put Mac address in all 3 AP's. Any help would be much appreciated, thanks.

Wireless Networking Wireless Hardware

Last Comment

Cyclops3590

6/6/2007

ASKER CERTIFIED SOLUTION

Les Moore

2/28/2007

THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

jkittle99

2/28/2007

lrmoore has is dead on - the AP's aren't going to communicate with eachother. Do you really want to do MAC access lists? That might not be a big deal with a few PC's, but that type of restriction won't scale well if you start talking about lots of AP's and lots of clients. A better way is to use something like EAP-FAST with an external authenticator (I use the Cisco ACS) and perform AAA-based authentication. That's going to get you off to a pretty decent start. I would avoid LEAP due to some vulnerabilities.

Are you doing WEP or WPA? Have you thought about the security implications of each?

Cyclops3590

6/6/2007

Haven't tried it because I never do MAC Authentication, but if you do EAP thru a MS IAS server then the policy condition for Calling-Station-Identifier can be used to match the mac of the client. However its one mac per condition so if you have a lot of clients, its not the best route.

Just a thought anyway.