Enterasys SECURESTACK C3, Configuration Manual

Page: 771 / 872

Configuring MAC Authentication
SecureStack C3 Configuration Guide 26-25
Configuring MAC Authentication
Purpose
To review, disable, enable and configure MAC authentication. This authentication method allows
the device to authenticate source MAC addresses in an exchange with an authentication server.
The authenticator (switch) selects a source MAC seen on a MAC ‐ authentication enabled port and
submits it to a backend client for authentication. The backend client uses the MAC address stored
password, if required, as credentials for an authentication attempt. If accepted, a string
representing an access policy and/or VLAN authorization may be returned. If present, the switch
applies the associated policy rules and VLAN segmentation.
You can specify a mask to apply to MAC addresses when authenticating users through a RADIUS
server (see “ set macauthentication significant ‐ bits ” on page 26 ‐ 35). The most common use of
significant bit masks is for authentication of all MAC addresses for a specific vendor.
Commands
show macauthentication
Use this command to display MAC authentication information for one or more ports.
Syntax
show macauthentication [ port-string ]
For information about... Refer to page...
show macauthentication 26-25
show macauthentication session 26-27
set macauthentication 26-28
set macauthentication password 26-28
clear macauthentication password 26-29
set macauthentication port 26-29
set macauthentication portinitialize 26-30
set macauthentication portquietperiod 26-30
clear macauthentication portquietperiod 26-31
set macauthentication macinitialize 26-31
set macauthentication reauthentication 26-32
set macauthentication portreauthenticate 26-32
set macauthentication macreauthenticate 26-33
set macauthentication reauthperiod 26-33
clear macauthentication reauthperiod 26-34
set macauthentication significant-bits 26-35
clear macauthentication significant-bits 26-35