Enterasys Networks 9034313-07 set macauthentication significant-bits, clear macauthentication significant-bits

set macauthentication significant-bits
SecureStack C3 Configuration Guide 26-35
set macauthentication significant-bits
UsethiscommandtosetthenumberofsignificantbitsoftheMACaddresstousefor
authentication.
Syntax
set macauthentication significant-bits number
Parameters
Defaults
None.
Mode
Switchcommand,read‐write.
Usage
ThiscommandallowsyoutospecifyamasktoapplytoMACaddresseswhenauthenticating
usersthroughaRADIUSserver.Themostcommonuseofsignificantbitmasksisfor
authenticationofallMACaddressesforaspecificvendor.
OnswitchesusingMACauthentication,theMACaddressofauserattemptingtologinissentto
theRADIUSserverastheusername.Ifaccessisdenied,andifasignificantbitmaskhasbeen
configured(otherthan48)withthiscommand,theswitchwillapplythemaskandresendthe
maskedaddresstotheRADIUSserver.Forexample,ifauserwithMACaddressof00‐16‐CF‐12‐
34‐56isdeniedaccess,anda32bitmaskhasbeenconfigured,theswitchwillapplythemaskand
resendaMACaddressof00‐16‐CF‐12‐00‐00totheRADIUSserver.
Touseasignificantbitsmaskforauthenticationofdevicesbyaparticularvendor,specifya24‐bit
mask,tomaskouteverythingexceptthevendorportionoftheMACaddress.
Example
ThisexamplesetstheMACauthenticationsignificantbitsmaskto24.
C3(su)->set macauthentication significant-bits 24
clear macauthentication significant-bits
UsethiscommandtoresetthenumberofsignificantbitsoftheMACaddresstousefor
authenticationtothedefaultof48.
Syntax
clear macauthentication significant-bits
Parameters
None.
Defaults
None.
number Specifiesthenumberofsignificantbitstobeusedforauthentication.