set macauthentication significant-bits
Enterasys C3 Configuration Guide 32-39
set macauthentication significant-bits
Use this command to set the number of significant bits of the MAC address to use for
authentication.
Syntax
set macauthentication significant-bits number
Parameters
Defaults
None.
Mode
Switch command, read-write.
Usage
This command allows you to specify a mask to apply to MAC addresses when authenticating
users through a RADIUS server. The most common use of significant bit masks is for
authentication of all MAC addresses for a specific vendor.
On switches using MAC authentication, the MAC address of a user attempting to log in is sent to
the RADIUS server as the user name. If access is denied, and if a significant bit mask has been
configured (other than 48) with this command, the switch will apply the mask and resend the
masked address to the RADIUS server. For example, if a user with MAC address of 00-16-CF-12-
34-56 is denied access, and a 32 bit mask has been configured, the switch will apply the mask and
resend a MAC address of 00-16-CF-12-00-00 to the RADIUS server.
To use a significant bits mask for authentication of devices by a particular vendor, specify a 24-bit
mask, to mask out everything except the vendor portion of the MAC address.
Example
This example sets the MAC authentication significant bits mask to 24.
C3(su)->set macauthentication significant-bits 24
clear macauthentication significant-bits
Use this command to reset the number of significant bits of the MAC address to use for
authentication to the default of 48.
Syntax
clear macauthentication significant-bits
Parameters
None.
Defaults
None.
number Specifies the number of significant bits to be used for authentication.
To Next Page
Loading...
Need help?
General