Enterasys Networks 9034313-07 manual Configuring MAC Authentication, Show macauthentication

Configuring MAC Authentication

Configuring MAC Authentication

Purpose

To review, disable, enable and configure MAC authentication. This authentication method allows the device to authenticate source MAC addresses in an exchange with an authentication server. The authenticator (switch) selects a source MAC seen on a MAC‐authentication enabled port and submits it to a backend client for authentication. The backend client uses the MAC address stored password, if required, as credentials for an authentication attempt. If accepted, a string representing an access policy and/or VLAN authorization may be returned. If present, the switch applies the associated policy rules and VLAN segmentation.

You can specify a mask to apply to MAC addresses when authenticating users through a RADIUS server (see “set macauthentication significant‐bits” on page 26‐35). The most common use of significant bit masks is for authentication of all MAC addresses for a specific vendor.

Commands

For information about...	Refer to page...
show macauthentication	26-25
show macauthentication session	26-27
set macauthentication	26-28
set macauthentication password	26-28
clear macauthentication password	26-29
set macauthentication port	26-29
set macauthentication portinitialize	26-30
set macauthentication portquietperiod	26-30
clear macauthentication portquietperiod	26-31
set macauthentication macinitialize	26-31
set macauthentication reauthentication	26-32
set macauthentication portreauthenticate	26-32
set macauthentication macreauthenticate	26-33
set macauthentication reauthperiod	26-33
clear macauthentication reauthperiod	26-34
set macauthentication significant-bits	26-35
clear macauthentication significant-bits	26-35

show macauthentication

Use this command to display MAC authentication information for one or more ports.

Syntax

show macauthentication [port-string]

SecureStack C3 Configuration Guide 26-25