Specifications

Configuring Authentication and Authorization by MAC Address
RoamAbout Mobility System Software Configuration Guide 17-21
ToaddtheMACuser00:01:02:03:04:05toVLANred:
RBT-8100# set mac-user 00:01:02:03:04:05 attr vlan-name red
success: change accepted
Tochangethevalueofanauthorizationattribute,reenterthecommandwiththenewvalue.To
clearanauthorizationattributefromaMACuserprofileinthelocaldatabase,usethefollowing
command:
clear mac-user mac-addr attr attribute-name
ThefollowingcommandclearstheVLANassignmentfromMACuser01:0f:02:03:04:05:
RBT-8100# clear mac-user 01:0f:03:04:05:06 attr vlan-name
success: change accepted.
(Foracompletelistofauthorizationattributes,seeTable 17‐5onpage 17‐42.)
Changing the MAC Authorization Password for RADIUS
WhenyouenableMACauthentication,theclientdoesnotsupplyaregularusernameor
password.TheMACaddressoftheuser’sdeviceisextractedfromframesreceivedfromthe
device.
ToauthenticateandauthorizeMA CusersviaRADIUS,youmustconfigureasinglepredefined
passwordforMACusers,whichiscalled
theoutboundauthorizationpassword.Thesame
passwordisusedforallMACuserentriesintheRADIUSdatabase.Setthispasswordbytyping
thefollowingcommand:
set radius server server-name author-password password
Thedefaultpasswordisnopassword.
Example
ThefollowingcommandsetstheoutboundauthorizationpasswordforMACusersonserver
bigbirdtoh00per:
RBT-8100# set radius server bigbird author-password h00per
success: change accepted.
IftheMACaddressisinthedatabase,MSSusestheVLANattributeandotherattributes
associatedwithitforuserauthorization.Otherwise,MSStriesthefallthruauthenticationtype,
whichcanbelast‐resort,Web,ornone.
Note: Before setting the outbound authorization password for a RADIUS server, you must have set
the address for the RADIUS server. For more information, see “Configuring RADIUS Servers” on
page 18-3.
Note: A MAC address must be dash-delimited in the RADIUS database—for example,
00-00-01-03-04-05. However, the MSS always displays colon-delimited MAC addresses.