Security
4-84 Advanced Configuration
Using the CLI to Configure Local MAC Authentication
Usethemac‐authenticationservercommandfromtheInterfaceWirelessorInterfaceWireless:
VAPconfigurationmodestoenablelocalMACauthentication.Setthedefaultbehavior(allowor
deny)forallunknownMACaddressesusingthemac‐accesspermissioncommand.Usethemac‐
accessentrycommandtoupdatethelocaltableby
entering,changingandremovingMAC
addresses.
Examples 
RoamAbout 4102#configure
Enter configuration commands, one per line. End with CTRL/Z
RoamAbout 4102(config)#interface wireless g
Enter Wireless configuration commands, one per line.
RoamAbout 4102(if-wireless g)#mac-access entry 00-01-f4-88-b3-d6 allowed
RoamAbout 4102(if-wireless g)#
RoamAbout 4102(if-wireless g)#mac-access entry 00-01-f4-88-b3-d6 denied
This MAC address 00-01-f4-cc-99-1a filter permission status has been changed !!
RoamAbout 4102(if-wireless g)#
RoamAbout 4102(if-wireless g)# mac-access entry 00-01-f4-88-b3-d6 delete
RoamAbout 4102(if-wireless g)#vap 4
RoamAbout 4102(if-wireless g: VAP[4])#mac-access entry 00-00-11-22-33-44 allowed
RoamAbout 4102(if-wireless g: VAP[4])#end
RoamAbout 4102(if-wireless g)#
Todisplaythecurrentsettings,usetheshowauthenticationcommandfromtheExecutivemode.
RoamAbout 4102#show authentication
802.11a Authentication Server Information
VAP AuthMode SessionTimeout Password                      Default Local MAC
============================================================================
Default LOCAL  0 min ***** ALLOWED
    1   LOCAL 0 min ***** ALLOWED
    2   LOCAL 0 min ***** ALLOWED
    3   LOCAL 2 min ***** ALLOWED
    4   LOCAL 0 min ***** ALLOWED
    5   LOCAL 0 min ***** ALLOWED
    6   LOCAL 0 min ***** ALLOWED
    7   LOCAL 0 min ***** ALLOWED
802.11b/g Authentication Server Information
VAP AuthMode SessionTimeout Password                      Default Local MAC
============================================================================
Default LOCAL  0 min NOPASSWORD ALLOWED
    1   LOCAL 0 min NOPASSWORD ALLOWED
    2   LOCAL 0 min NOPASSWORD ALLOWED
    3   LOCAL 0 min NOPASSWORD ALLOWED
    4   LOCAL 0 min NOPASSWORD ALLOWED
    5   LOCAL 0 min NOPASSWORD ALLOWED
    6   LOCAL 0 min NOPASSWORD ALLOWED
    7   LOCAL 0 min NOPASSWORD ALLOWED
802.1x Supplicant Information
============================================================================
802.1x supplicant : DISABLED
802.1x supplicant user : EMPTY
802.1x supplicant password : EMPTY
MAC Address Filter Status List in SSID