Chapter 1 What’s New for FortiOS 5.0 : New features in FortiOS 5.0 Patch 2 : Wireless RADIUS-Based MAC Authentication
  
Wireless RADIUS-Based MAC Authentication
Wireless clients can be supplementally authenticated by MAC address. A RADIUS server stores the allowed MAC address for each client and the wireless controller checks the MAC address independently of other authentication methods.
MAC-based authentication must be configured in the CLI. In the following example, MAC-based authentication is added to an existing access point vap1 to use a RADIUS server at 192.168.1.95:
config wireless-controller vap
edit vap1
set radius-mac-auth enable
set radius-mac-auth-server 192.168.1.95
end