Operation Manual

AAA Commands
Mobility System Software Command Reference Guide
Version 7.3
9 – 178
Syntax set mac-user mac-address-glob[group group-name]
Defaults None.
Access Enabled.
History
Usage
MSS does not require MAC users to belong to user groups.
Users authenticated by MAC address are authenticated only for network access through the MX.
MSS does not support passwords for MAC users.
Examples The following command creates a user profile for a user at MAC address
01:02:03:04:05:* and assigns the user to the eastcoasters user group:
MX# set mac-user 01:02:03:04:05:* group eastcoasters
success: change accepted.
See Also
● clear mac-user on page 9-154
● show aaa on page 9-190
set mac-user attr
Assigns an authorization attribute in the local database on the MX to a user authenticating with a
MAC address.
(To assign authorization attributes through RADIUS, see the documentation for your RADIUS
server.)
Syntax set mac-user mac-address-glob attr attribute-name value
Defaults None.
Access Enabled.
mac-addr-glob . Allows a group of MAC devices to authenticate, such as a group
of VoIP phones. Ony ine asterisk is allowed and it must be the
last character.
The most specific format overrides other formats. For instance,
00:11:30:21:ab:cd overrides an entry of 00:11:30:*.
group-name Name of an existing MAC user group.
MSS Version 1.0 Introduced command
MSS Version 6.2 MAC glob introduced.
mac-address-glob MAC address of the user, in hexadecimal numbers
separated by colons (:). You can omit leading zeros.
attribute-name value Name and value of an attribute used to authorize the
MAC user for a particular service or session
characteristic. For a list of authorization attributes and
values that you can assign to local users, see Table 9– 9
on page 179.