Enterasys SecureStack C2

set macauthentication significant-bits
SecureStack C2 Configuration Guide 18-29
Example
ThisexampleshowshowtogloballycleartheMACreauthenticationperiod:
C2(su)->clear macauthentication reauthperiod
set macauthentication significant-bits
UsethiscommandtosetthenumberofsignificantbitsoftheMACaddresstousefor
authentication.
Syntax
set macauthentication significant-bits number
Parameters
Defaults
None.
Mode
Switchcommand,read‐write.
Usage
ThiscommandallowsyoutospecifyamasktoapplytoMACaddresseswhenauthenticating
usersthroughaRADIUSserver.Themostcommonuseofsignificantbitmasksisfor
authenticationofallMACaddressesforaspecificvendor.
OnswitchesusingMACauthentication,theMACaddressofauserattempting
tologinissentto
theRADIUSserverastheusername.Ifaccessisdenied,andifasignificantbitmaskhasbeen
configured(otherthan48)withthiscommand,theswitchwillapplythemaskandresendthe
maskedaddresstotheRADIUSserver.Forexample,ifa
userwithMACaddressof00‐16‐CF‐12‐
34‐56isdeniedaccess,anda32bitmaskhasbeenconfigured,theswitchwillapplythemaskand
resendaMACaddressof00‐16‐CF‐12‐00‐00totheRADIUSserver.
Touseasignificantbitsmaskfor
authenticationofdevicesbyaparticularvendor,specifya24‐bit
mask,tomaskouteverythingexceptthevendorportionoftheMACaddress.
Example
ThisexamplesetstheMACa uthenticationsignificantbitsmaskto24.
C2(su)->set macauthentication significant-bits 24
clear macauthentication significant-bits
UsethiscommandtoresetthenumberofsignificantbitsoftheMACaddresstousefor
authenticationtothedefaultof48.
Syntax
clear macauthentication significant-bits
number Specifiesthenumberofsignificantbitstobeusedforauthentication.