Enterasys G3G170-24, Cli Reference Manual

Page: 621 / 679

Configuring MAC Authentication
Enterasys G-Series CLI Reference 20-19
Mode
Switch command, read ‐ write.
Example
This example shows how to clear the EAPOL authentication mode for port ge .1.3:
G3(su)->clear eapol auth-mode ge.1.3
Configuring MAC Authentication
Purpose
To review, disable, enable and configure MAC authentication. This authentication method allows
the device to authenticate source MAC addresses in an exchange with an authentication server.
The authenticator (switch) selects a source MAC seen on a MAC ‐ authentication enabled port and
submits it to a backend client for authentication. The backend client uses the MAC address stored
password, if required, as credentials for an authentication attempt. If accepted, a string
representing an access policy may be returned. If present, the switch applies the associated policy
rules.
You can specify a mask to apply to MAC addresses when authenticating users through a RADIUS
server (see “ set macauthentication significant ‐ bits ” on page 20 ‐ 29). The most common use of
significant bit masks is for authentication of all MAC addresses for a specific vendor.
Commands
For information about... Refer to page...
show macauthentication 20-20
show macauthentication session 20-21
set macauthentication 20-22
set macauthentication password 20-23
clear macauthentication password 20-23
set macauthentication port 20-23
set macauthentication portinitialize 20-24
set macauthentication portquietperiod 20-25
clear macauthentication portquietperiod 20-25
set macauthentication macinitialize 20-26
set macauthentication reauthentication 20-26
set macauthentication portreauthenticate 20-27
set macauthentication macreauthenticate 20-27
set macauthentication reauthperiod 20-28
clear macauthentication reauthperiod 20-28
set macauthentication significant-bits 20-29