Switch User Manual

Configuring MAC Authentication
SecureStack C3 Configuration Guide 26-25
Configuring MAC Authentication
Purpose
Toreview,disable,enableandconfigureMACauthentication.Thisauthenticationmethodallows
thedevicetoauthenticatesourceMACaddressesinanexchangewithanauthenticationserver.
Theauthenticator(switch)sel ectsasourceMACseenonaMAC‐authenticationenabledportand
submitsittoabackendclientforauthentication.Thebackend
clientusestheMACaddressstored
password,ifrequired,ascredentialsforanauthenticationattempt.Ifaccepted,astring
representinganaccesspolicyand/orVLANauthorizationmaybereturned.Ifpresent,theswitch
appliestheassociatedpolicyrulesandVLANsegmentation.
YoucanspecifyamasktoapplytoMACaddresses
whenauthenticatingusersthroughaRADIUS
server(see“setmacauthenticationsignificant‐bits ”onpage 26‐35).Themostcommonuseof
significantbitmasksisforauthenticationofallMACaddressesforaspecificvendor.
Commands
show macauthentication
UsethiscommandtodisplayMACauthenticationinformationforoneormoreports.
Syntax
show macauthentication [port-string]
For information about... Refer to page...
show macauthentication 26-25
show macauthentication session 26-27
set macauthentication 26-28
set macauthentication password 26-28
clear macauthentication password 26-29
set macauthentication port 26-29
set macauthentication portinitialize 26-30
set macauthentication portquietperiod 26-30
clear macauthentication portquietperiod 26-31
set macauthentication macinitialize 26-31
set macauthentication reauthentication 26-32
set macauthentication portreauthenticate 26-32
set macauthentication macreauthenticate 26-33
set macauthentication reauthperiod 26-33
clear macauthentication reauthperiod 26-34
set macauthentication significant-bits 26-35
clear macauthentication significant-bits 26-35