Specifications
set mac-authentication mac-address
486
set mac-authentication mac-address
Adds a MAC address for MAC-based authentication to the internal MAC-based
authentication DB. A MAC mask and a VLAN ID to which the MAC address belongs can
also be specified. You can add a MAC address that has already been registered if its MAC
mask or VLAN ID is different from the registered MAC address.
To check the editing or registration status, execute the
show mac-authentication
mac-address command.
To apply the setting to the internal MAC-based authentication DB, execute the
commit
mac-authentication
command.
Syntax
set mac-authentication mac-address <MAC> [<MAC mask>] [<VLAN ID>]
Input mode
Administrator mode
Parameters
<MAC>
Specify the MAC address to be registered.
Specify the MAC address in the range from
0000.0000.0000 to feff.ffff.ffff.
Note that you cannot specify a multicast MAC address (address in which the lowest
bit of the first byte is 1).
<MAC mask>
Specify in MAC address format a MAC address mask in which you set the bits that
you want to allow any value set to 1.
Specify the MAC address mask in the range from
0000.0000.0000 to
ffff.ffff.ffff.
Operation when this parameter is omitted:
The MAC mask becomes
0000.0000.0000.
Specification of
ffff.ffff.ffff as the MAC mask:
All MAC addresses are applied.
Specify
0000.0000.0000 for the MAC address and ffff.ffff.ffff for the
MAC mask.
Only one entry can be registered for this condition. If an entry in this condition
has already been registered, registering a new entry overwrites the old one.
<VLAN ID>
Specify the VLAN ID of the VLAN to which the terminal will communicate after
authentication. For details about the specifiable range of values, see Specifiable
values for parameters.
Operation when this parameter is omitted:
The VLAN ID is not checked at authentication time.
Example
To add 0012.e200.1234 as the MAC address and 10 as the VLAN ID:
# set mac-authentication mac-address 0012.e200.1234 10
Adding 0012.e2 as the vender ID and 0000.00ff.ffff as the MAC mask:
# set mac-authentication mac-address 0012.e200.0000 0000.00ff.ffff 10