Specifications

mac-authentication vlan-check
535
mac-authentication vlan-check
Checks the VLAN ID when checking a MAC address during authentication processing.
For the RADIUS authentication method, the MAC address string, the string set by using this
command (
%VLAN is set by default), and the VLAN ID are combined and used as the user ID
for sending an authentication request to the RADIUS server.
For the local authentication method, the MAC address string and the VLAN ID are checked
against the internal MAC-based authentication DB (if there is no VLAN ID information in the
internal MAC-based authentication DB, only the MAC address string is used for the check).
Syntax
To set or change information:
mac-authentication vlan-check [ key <String> ]
To delete information:
no mac-authentication vlan-check
Input mode
(config)
Parameters
key <String>
This parameter applies only to the RADIUS authentication method.
The parameter sets a character string that is added to the user ID when an
authentication request is sent to the RADIUS server.
This parameter is invalid for the local authentication method.
1. Default value when this parameter is omitted:
%VLAN is set.
2. Range of values:
The password can be 1 to 64 characters. For details about the characters that
can be specified, see Specifiable values for parameters.
Default behavior
No VLAN IDs are added during the MAC-based authentication check.
Impact on communication
None
When the change is applied
The change is applied immediately after setting values are changed.
Notes
1. All MAC-based authentication settings take effect when the mac-authentication
system-auth-control command is set.
2. See Table 24-1 Configuration commands and MAC-based authentication modes for
the authentication mode in which the command's settings are operable.