2-12 Command Line Interface Commands Reference

MAC Address Security Commands

Note: These commands are supported beginning with firmware version 8.5.

security mac-auth mode [ disabled allow-list deny-list ] show security mac-auth mode

These commands allow you to configure or display the global MAC authentication mode. If set to allow-list, all non-matching unicasts will be dropped. If set to deny-list, all matching unicasts will be dropped.

security mac-auth wireless-only [ yes no ] show security mac-auth wireless-only

These commands allow you to restrict or display the restricted status of MAC address authentication. If set to yes, the MAC authentication applies only to the wireless interface, on models so equipped. If set to no, packets received at all interfaces on the LAN are subject to the MAC filtering table.

security mac-auth mac-deny MAC-addrshow security mac-deny

These commands allow you to specify or display the MAC address for hosts on the wired or wireless LAN (if so restricted) whose source or destination MAC address will cause the router to filter their packets.

security mac-auth mac-allow MAC-addrshow security mac-authmac-allow

These commands allow you to specify or display the MAC address for hosts on the wired or wireless LAN (if so restricted) whose source or destination MAC address will cause the router to pass their packets.

Note: Wireless MAC authentication commands are also supported. See “Wireless Configuration Commands” on page 2-86.

Page 24
Image 24
Netopia CLI 874 manual MAC Address Security Commands