Enterasys D-Series

set macauthentication significant-bits
Enterasys D-Series CLI Reference 17-31
set macauthentication significant-bits
UsethiscommandtosetthenumberofsignificantbitsoftheMACaddresstousefor
authentication.
Syntax
set macauthentication significant-bits number
Parameters
Defaults
None.
Mode
Switchcommand,read‐write.
Usage
ThiscommandallowsyoutospecifyamasktoapplytoMACaddresseswhenauthenticating
usersthroughaRADIUSserver.Themostcommonuseofsignificant bitmasksisfor
authenticationofallMACaddressesforaspecificvendor.
OnswitchesusingMACauthentication,theMACaddressofauserattempting
tologinissentto
theRADIUSserverastheusername.Ifaccessisdenied,andifasignificantbitmaskhasbeen
configured(otherthan48)withthiscommand,theswitchwillapplythemaskandresendthe
maskedaddresstotheRADIUSserver.Forexample,ifa
userwithMACaddressof00‐16‐CF‐12‐
34‐56isdeniedaccess,anda32bitmaskhasbeenconfigured,theswitchwillapplythemaskand
resendaMACaddressof00‐16‐CF‐12‐00‐00totheRADIUSserver.
Touseasignificantbitsmaskfor
authenticationofdevicesbyaparticularvendor,specifya24‐bit
mask,tomaskouteverythingexceptthevendorportionoftheMACaddress.
Example
ThisexamplesetstheMACauthenti cationsignificantbitsmaskto24.
D2(su)->set macauthentication significant-bits 24
clear macauthentication significant-bits
UsethiscommandtoresetthenumberofsignificantbitsoftheMACaddresstousefor
authenticationtothedefaultof48.
Syntax
clear macauthentication significant-bits
Parameters
None.
Defaults
None.
number Specifiesthenumberofsignificantbitstobeusedforauthentication.