188 CHAPTER 6: C ONFIGURING WX S YSTEM PARAMETERSIf RF Auto-Tuning for power configuration is enabled, setting this valuehas no effect. The power level is controlled by RF Auto-Tuning.10 Click Finish.Configure a Port forWired AuthenticationA wired authentication port is an Ethernet port that has 802.1Xauthentication enabled for access control. Like wireless users, users thatare connected to the WX switch over Ethernet can be authenticatedbefore they can be authorized to use the network. However, data forwired users is not encrypted after they are authenticated.For 802.1X clients, wired authentication works only if the clients aredirectly attached to the wired authentication port, or are attachedthrough a hub that does not block forwarding of packets from the clientto the PAE group address (01:80:c2:00:00:03). Wired authenticationworks in accordance with the 802.1X specification, which prohibits aclient from sending traffic directly to the MAC address of anauthenticator until the client is authenticated. Instead of sending trafficto the MAC address of an authenticator, the client sends packets to thePAE group address. The 802.1X specification prohibits networkingdevices from forwarding PAE group address packets, because this wouldmake it possible for multiple authenticators to acquire the same client.For non-802.1X clients, who use MAC authentication, WebAAA, orlast-resort authentication, wired authentication works if the clients aredirectly attached or indirectly attached.If you plan to specify a RADIUS server group, configure the group first,before using the wizard. The wizard does not provide a way to configureRADIUS servers or groups. (See “Viewing and Configuring RADIUSSettings” on page 311.)1 Access the Configure Wired Auth wizard:a Select the Configuration tool bar option.b In the Organizer panel, click the plus sign next to the WX switch.c Click the plus sign next to System.d Select Ports.e Select the row for the port.f In the Task List panel, select Wired Auth.
