Switch User Manual

set macauthentication significant-bits
SecureStack C3 Configuration Guide 26-35
set macauthentication significant-bits
UsethiscommandtosetthenumberofsignificantbitsoftheMACaddresstousefor
authentication.
Syntax
set macauthentication significant-bits number
Parameters
Defaults
None.
Mode
Switchcommand,read‐write.
Usage
ThiscommandallowsyoutospecifyamasktoapplytoMACaddresseswhenauthenticating
usersthroughaRADIUSserver.Themostcommonuseofsignificantbitmasksisfor
authenticationofallMACaddressesforaspecificvendor.
OnswitchesusingMACauthentication,theMACaddressofauserattempting
tologinissentto
theRADIUSserveras theusername.Ifaccessisdenied,andifasignificantbitmaskhasbeen
configured(otherthan48)withthiscommand,theswitchwillapplythemaskandresendthe
maskedaddresstotheRADIUSserver.Forexample,ifa
userwithMACaddressof00‐16‐CF‐12‐
34‐56isdeniedaccess,anda32bitmaskhasbeenconfigured,theswitchwillapplythemaskand
resendaMACaddressof00‐16‐CF‐12‐00‐00totheRADIUSserver.
Touseasignificantbitsmaskfor
authenticationofdevicesbyaparticularvendor,specifya24‐bit
mask,tomaskouteverythingexceptthevendorportionoftheMACaddress.
Example
ThisexamplesetstheMACa uthenti cat ionsignificantbitsmaskto24.
C3(su)->set macauthentication significant-bits 24
clear macauthentication significant-bits
UsethiscommandtoresetthenumberofsignificantbitsoftheMACaddresstousefor
authenticationtothedefaultof48.
Syntax
clear macauthentication significant-bits
Parameters
None.
Defaults
None.
number Specifiesthenumberofsignificantbitstobeusedforauthentication.