Command Reference Guide

236 CHAPTER 7: AAA COMMANDS
See Also
 clear authentication last-resort on page 205
 display aaa on page 217
 set authentication admin on page 226
 set authentication console on page 228
 set authentication dot1x on page 230
 set authentication mac on page 236
 set authentication web on page 239
set authentication
mac
Configures authentication and defines where it is performed for specified
non-802.1X users with network access through a media access control
(MAC) address.
Syntax —
set authentication mac
{ssid ssid-name | wired} mac-addr-glob method1
[method2] [method3] [method4]
 ssid ssid-name — SSID name to which this authentication rule
applies. To apply the rule to all SSIDs, type any.
 wired — Applies this authentication rule specifically to users
connected to a wired authentication port.
 mac-addr-glob — A single user or set of users with access via a MAC
address. Specify a MAC address, or use the wildcard (*) character to
specify a set of MAC addresses. (For details, see “MAC Address
Globs” on page 27.)
 method1, method2, method3, method4 — At least one of up to four
methods that MSS uses to handle authentication. Specify one or more
of the following methods in priority order. MSS applies multiple
methods in the order you enter them.
A method can be one of the following:
 local — Uses the local database of usernames and user groups on
the WX switch for authentication.
 server-group-name — Uses the defined group of RADIUS servers
for authentication. You can enter up to four names of existing
RADIUS server groups as methods.
For more information, see “Usage.”