Specifications

RoamAbout Mobility System Software Command Line Reference 8-35
set authentication mac
Configuresauthenticationanddefineswhereitisperformedforspecifiednon‐802.1Xuserswith
networkaccessthroughamediaaccesscontrol(MAC)address.
Syntax
set authentication mac {ssid ssid-name | wired} mac-addr-glob method1 [method2]
[method3] [method4]
Parameters
Default
Bydefault,authenticationisdeactivatedforallMACusers,whichmeansMACaddress
authenticationfailsbydefault.WhenusingRADIUSforauthentication,thedefaultwell‐known
passwordforMACandlast‐resortusersisnopassword.
Mode
Enabled.
Usage
YoucanconfiguredifferentauthenticationmethodsfordifferentgroupsofMACaddressesby
“globbing.”(Fordetails,see “UserGlobs,MACAddressGlobs,andVLANGlobs”onpage 1‐3.)
Ifyouspecifymultipleauthenticationmethodsinthesetauthenticationmaccommand,MSS
appliesthemintheorderinwhichtheyappear
inthecommand,withtheseresults:
•Ifthefirstmethodrespondswithpassorfail,theevaluationisfinal.
•Ifthefirstmethoddoesnotrespond,MSStriesthesecondmethod,andsoon.
ssidssid‐name SSIDnametowhichthisauthenticationruleapplies.Toapplytheruletoall
SSIDs,
typeany.
wired Appliesthisauthenticationrulespecifical lytousersconnectedtoawired
authenticationport.
mac‐addr‐glob AsingleuserorsetofuserswithaccessviaaMACaddress.SpecifyaMAC
address,orusethewildcard(*)charactertospecifyasetofMACaddresses.
(Fordetails,
see“MACAddressGlobs”onpage 1‐4.)
method1
method2
method3
method4
AtleastoneofuptofourmethodsthatMSSusestohandleauthentication.
Specifyoneormoreofthefollowingmethodsinpriorityorder.MSSapplies
multiplemethodsintheorderyouenterthem.
Amethodcanbeoneofthe
following:
• local—Usesthelocaldatabaseofusernamesandusergroupsonthe
RASforauthentication.
• server‐group‐name—UsesthedefinedgroupofRADIUSserversfor
authentication.YoucanenteruptofournamesofexistingRADIUS
servergroupsasmethods.
Formoreinformation,see“Usage.”