Security

CLI Commands for RADIUS MAC Authentication

Use the mac‐authentication server command from the Interface Wireless or Interface Wireless: VAP configuration modes to enable remote MAC authentication. Set the timeout value for re‐ authentication using the mac‐authentication session‐timeout command. Specify a password for the AP to send to the RADIUS server for MAC authentication using the mac‐authentication password command. Be sure to also configure connection settings for the RADIUS server (not shown in the following example).

RoamAbout 3000#configure

Enter configuration commands, one per line. End with CTRL/Z RoamAbout 3000(config)#interface wireless a

Enter Wireless configuration commands, one per line. RoamAbout 3000(if-wireless a)#mac-authentication server remote RoamAbout 3000(if-wireless a)#mac-authentication session-timeout 300 RoamAbout 3000(if-wireless a)#mac-authentication password Uc*2Zq RoamAbout 3000(if-wireless a)#vap 6

RoamAbout 3000(if-wireless a: VAP[6])#mac-authentication server remote

RoamAbout 3000(if-wireless a: VAP[6])#mac-authentication session-timeout 300

RoamAbout 3000(if-wireless a: VAP[6])#mac-authentication password Uc*3Zq

RoamAbout 3000(if-wireless a: VAP[6])#exit RoamAbout 3000#

To display the current settings, use the show authentication command from the Exec mode.

4-72 Advanced Configuration

Page 106
Image 106
Enterasys Networks 9033900-04 manual CLI Commands for Radius MAC Authentication