MRV Communications MRW55, User Manual

Page: 73 / 244

Advanced Configuration
6-15
6
CLI Commands for Local MAC Authentication – Use the mac-authentication
server command from the global configuration mode to enable local MAC
authentication. Set the default for MAC addresses not in the local table using the
address filter default command, then enter MAC addresses in the local table using
the address filter entry command. To remove an entry from the table, use the
address filter delete command. To display the current settings, use the show
authentication command from the Exec mode.
MRW55#(config)#802.1X supplicant wds_user 1 David 7-38
MRW55#(config)#802.1X supplicant wds_password 1 ABC 7-38
MRW55#(config)#802.1X supplicant wds 1 7-38
MRW55#(config)#
MRW55(config)#mac-authentication server local 7-41
MRW55(config)#address filter default denied 7-39
MRW55(config)#address filter entry 00-70-50-cc-99-1a
denied
7-40
MRW55(config)#address filter entry 00-03-7F-E0-06-EA allowed
MRW55(config)#address filter entry 00-70-50-cc-99-1c allowed
MRW55(config)#address filter delete 00-70-50-cc-99-1c
7-40
MRW55(config)#exit
MRW55#show authentication
7-42
Authentication Information
=========================================================
MAC Authentication Server : LOCAL
MAC Auth Session Timeout Value : 300 secs
802.1X : DISABLED
Broadcast Key Refresh Rate : 5 min
Session Key Refresh Rate : 5 min
802.1X Session Timeout Value : 300 secs
Address Filtering : DENIED
System Default : DENY addresses not found in filter table.
Filter Table
MAC Address Status
----------------- ----------
00-70-50-cc-99-1a DENIED
00-03-7F-E0-06-EA ALLOWED
=========================================================
MRW55#