ZyXEL Communications NOT AVAILABLE 24.2.4 MAC Auth Commands

Chapter 24 User/Group

24.2.4 MAC Auth Commands

This table lists the commands for mappings MAC addresses to MAC address user accounts.

Table 100 mac-auth Commands Summary

COMMAND	DESCRIPTION
[no] mac-auth database mac mac address type	Maps the specified MAC address authenticated by
ext-mac-address mac-role username description	an external server to the specified MAC role (MAC
description	address user account).
	The no command deletes the mapping between
	the MAC address and the MAC role.
[no] mac-auth database mac mac address type	Maps the specified MAC address authenticated by
int-mac-address mac-role username description	the NXC’s local user database to the specified
description	MAC role (MAC address user account).
	The no command deletes the mapping between
	the MAC address and the MAC role.
[no] mac-auth database mac oui type ext-oui	Maps the specified OUI (Organizationally Unique
mac-role username description description	Identifier) authenticated by an external server to
	the specified MAC role (MAC address user
	account). The OUI is the first three octets in a MAC
	address and uniquely identifies the manufacturer of
	a network device.
	The no command deletes the mapping between
	the OUI and the MAC role.
[no] mac-auth database mac oui type int-oui	Maps the specified OUI (Organizationally Unique
mac-role username description description	Identifier) authenticated by the NXC’s local user
	database to the specified MAC role (MAC address
	user account). The OUI is the first three octets in a
	MAC address and uniquely identifies the
	manufacturer of a network device.
	The no command deletes the mapping between
	the OUI and the MAC role.

24.2.4.1 MAC Auth Example

This example uses an external server to authenticate wireless clients by MAC address. After authentication the NXC maps the wireless client to a mac-address user account (MAC role). Configure user-aware features to control MAC address user access to network services.

The following commands:

•Create a MAC role (mac-address user type user account) named ZyXEL-mac

•Map a wireless client’s MAC address of 00:13:49:11:a0:c4 to the ZyXEL-mac MAC role (MAC address user account)

•Modify the WLAN security profile named secureWLAN1 as follows:

•Turn on MAC authentication

•Use the authentication method named Auth1

•Use colons to separate the two-character pairs within account MAC addresses

	173
NXC CLI Reference Guide	173