Security

CLI Commands for Local MAC Authentication

Use the mac‐authentication server command from the Interface Wireless or Interface Wireless: VAP configuration modes to enable local MAC authentication. Set the default behavior (allow or deny) for all unknown MAC addresses using the mac‐access permission command. Use the mac‐ access entry command to update the local table by entering, changing and removing MAC addresses.

RoamAbout 3000#configure

Enter configuration commands, one per line. End with CTRL/Z RoamAbout 3000(config)#interface wireless g

Enter Wireless configuration commands, one per line.

RoamAbout 3000(if-wireless g)#mac-access entry 00-01-f4-88-b3-d6 allowed RoamAbout 3000(if-wireless g)#

RoamAbout 3000(if-wireless g)#mac-access entry 00-01-f4-88-b3-d6 denied

This MAC address 00-01-f4-cc-99-1a filter permission status has been changed !! RoamAbout 3000(if-wireless g)#

RoamAbout 3000(if-wireless g)# mac-access entry 00-01-f4-88-b3-d6 delete RoamAbout 3000(if-wireless g)#vap 4

RoamAbout 3000(if-wireless g: VAP[4])#mac-access entry 00-00-11-22-33-44 allowed

RoamAbout 3000(if-wireless g: VAP[4])#end RoamAbout 3000(if-wireless g)#

To display the current settings, use the show authentication command from the Exec mode.

4-70 Advanced Configuration

Page 104
Image 104
Enterasys Networks 9033900-04 manual CLI Commands for Local MAC Authentication