Wireless: MAC authentication

[schrempf]

First, thanks for your help and thoughts on following questions.

As it stands I have 24 Cisco wireless routers (aironet 1200 series), with WEP, hidden SSID and MAC Authentication. Secure enough for our needs.

My problem is this, when i want to add someones MAC to authenticate, I have to add it to each routre individually. Not to much of a problem, but tedious.

My question is as follows: Is there anything out there that would allow me to enter the MAC into one database, and the routers check that database instead of their own for authentication? I think cisco makes some software, but its pricey and i would perfer to keep it cheap.

All routers are on the same network, and I do have access to a Win2003 Server.

Thanks for your help and suggestions.

 

[nweaver]

Yes, use one AP as the "radius" server and point the others two it. In the Web UI you go to security, local radius server to set it up.

or, with that many AP's, you are MUCH better off getting ACS (A real radius server) and implementing 802.1x auth (LEap or EAP-Fast) and WDS for fast roaming.

 

[jwhitt]

agreed with that many ap's id setup a small linux radius server or somethig (if you alrtready have a win server use that) but gnu or free radius are pretty easy to setup in a pinch... just saw you have access to a win 03 server thers a built in raduis server on that i believe

 

[nweaver]

Cisco 1200 AP's also have built in radius. I'm biased towards Cisco ACS, but that's because I do cisco wireless testing.

 

[jwhitt]

yeah i setup a wireless isp using all cisco equipment... honestly nothing else touches it.... though ive movesd on to different jobs sence then and havent touched anythig newer than a 350 series ap or bridge etc