Anyone done MAC address authentication with IAS?

Most Apple Macs have MAC addresses.

But, not all MAC addresses belong to Apple Macs!

:-) :-) :-)

To the original question: This would have to be a feature built into the WAPs where the table of MACs is automatically propagated from a "master" WAP to the "slave" WAPs. I don't know of any that do this but I'm not that experienced with a many-WAP network.

Suggestion: If you set up your network such that all WAP traffic eventually got routed through one wired router, that one router could be the place where the MAC table is maintained.

-----Steve Jackson

CEO/CSA
Software Corporation (Softcorp)
http://www.softcorp.us/probono
Advanced pro bono tools and utilities free for personal use

DC_GUY: You're listed as an IT consultant, but clearly have no idea what a MAC address is.

Furthermore, most of the programmers, and ALL of the UNIX professionals that I have ever met are, as you put it "Mac enthusiasts". This is irrelevant to the topic at hand, however, since MAC addresses have absolutely nothing to do with Apple.

To the OP: You can use a RADIUS server to authenticate via MAC address, however, MAC filtering is extremely weak security, and should not be considered to enhance the overall security of your wireless network. RADIUS authentication of users coupled with strong encryption, good policies, and in a best case scenario machine certificates will provide a level of security sufficient for most settings.