Enterasys Networks D2G124-12P Benutzerhandbuch
set macauthentication significant-bits
D-Series CLI Reference 15-29
Example
This example shows how to globally clear the MAC reauthentication period:
D2(su)->clear macauthentication reauthperiod
set macauthentication significant-bits
Use this command to set the number of significant bits of the MAC address to use for
authentication.
authentication.
Syntax
set macauthentication significant-bits number
Parameters
Defaults
None.
Mode
Switch command, read‐write.
Usage
This command allows you to specify a mask to apply to MAC addresses when authenticating
users through a RADIUS server. The most common use of significant bit masks is for
authentication of all MAC addresses for a specific vendor.
users through a RADIUS server. The most common use of significant bit masks is for
authentication of all MAC addresses for a specific vendor.
On switches using MAC authentication, the MAC address of a user attempting to log in is sent to
the RADIUS server as the user name. If access is denied, and if a significant bit mask has been
configured (other than 48) with this command, the switch will apply the mask and resend the
masked address to the RADIUS server. For example, if a user with MAC address of 00‐16‐CF‐12‐
34‐56 is denied access, and a 32 bit mask has been configured, the switch will apply the mask and
resend a MAC address of 00‐16‐CF‐12‐00‐00 to the RADIUS server.
the RADIUS server as the user name. If access is denied, and if a significant bit mask has been
configured (other than 48) with this command, the switch will apply the mask and resend the
masked address to the RADIUS server. For example, if a user with MAC address of 00‐16‐CF‐12‐
34‐56 is denied access, and a 32 bit mask has been configured, the switch will apply the mask and
resend a MAC address of 00‐16‐CF‐12‐00‐00 to the RADIUS server.
To use a significant bits mask for authentication of devices by a particular vendor, specify a 24‐bit
mask, to mask out everything except the vendor portion of the MAC address.
mask, to mask out everything except the vendor portion of the MAC address.
Example
This example sets the MAC authentication significant bits mask to 24.
D2(su)->set macauthentication significant-bits 24
clear macauthentication significant-bits
Use this command to reset the number of significant bits of the MAC address to use for
authentication to the default of 48.
authentication to the default of 48.
Syntax
clear macauthentication significant-bits
number
Specifies the number of significant bits to be used for authentication.