set authentication mac 247
set authentication
mac
Configures authentication and defines where it is performed for specified
non-802.1X users with network access through a media access control
(MAC) address.
Syntax —
set authentication mac
{ssid ssid-name | wired} mac-addr-glob method1
[method2] [method3] [method4]
ssid ssid-name — SSID name to which this authentication rule
applies. To apply the rule to all SSIDs, type any.
wired — Applies this authentication rule specifically to users
connected to a wired authentication port.
mac-addr-glob — A single user or set of users with access via a MAC
address. Specify a MAC address, or use the wildcard (*) character to
specify a set of MAC addresses. (For details, see “MAC Address
Globs” on page 31.)
method1, method2, method3, method4 — At least one of up to four
methods that MSS uses to handle authentication. Specify one or more
of the following methods in priority order. MSS applies multiple
methods in the order you enter them.
A method can be one of the following:
local — Uses the local database of usernames and user groups on
the WX switch for authentication.
server-group-name — Uses the defined group of RADIUS servers
for authentication. You can enter up to four names of existing
RADIUS server groups as methods.
For more information, see “Usage.”
Defaults — By default, authentication is deactivated for all MAC users,
which means MAC address authentication fails by default. When using
RADIUS for authentication, the default password for a MAC user is the
MAC address of the user.
Access — Enabled.
History —Introduced in MSS Version 3.0.
Usage — You can configure different authentication methods for
different groups of MAC addresses by “globbing.” (For details, see “User
Globs, MAC Address Globs, and VLAN Globs” on page 30.)