Configuring MAC Authentication
SecureStack B3 Configuration Guide 20-19
Mode
Switchcommand,read‐write.
Example
ThisexampleshowshowtocleartheEAPOLauthenticationmodeforportge.1.3:
B3(su)->clear eapol auth-mode ge.1.3
Configuring MAC Authentication
Purpose
Toreview,disable,enableandconfigureMACauthentication.Thisauthenticationmethodallows
thedevicetoauthenticatesourceMA Caddressesinanexchangewithanauthenticationserver.
Theauthenticator(switch)sel ectsasourceMACseenonaMAC‐authenticationenabledportand
submitsittoabackendclientforauthentication.Thebackend
clientusestheMACaddressstored
password,ifrequired,ascredentialsforanauthenticationattempt.Ifaccepted,astring
representinganaccesspolicymaybereturned.Ifpresent,theswitchappliestheassociatedpolicy
rules.
YoucanspecifyamasktoapplytoMACaddresseswhenauthenticatingusersthroughaRADIUS
server(see“setmacauthenticationsignificant‐bits ”onpage 20‐29).Themostcommonuseof
significantbitmasksisforauthenticationofallMACaddressesforaspecificvendor.
Commands
For information about... Refer to page...
show macauthentication 20-20
show macauthentication session 20-21
set macauthentication 20-22
set macauthentication password 20-22
clear macauthentication password 20-23
set macauthentication port 20-23
set macauthentication portinitialize 20-24
set macauthentication portquietperiod 20-25
clear macauthentication portquietperiod 20-25
set macauthentication macinitialize 20-26
set macauthentication reauthentication 20-26
set macauthentication portreauthenticate 20-27
set macauthentication macreauthenticate 20-27
set macauthentication reauthperiod 20-28
clear macauthentication reauthperiod 20-28
set macauthentication significant-bits 20-29