3com WXR100 3CRWXR10095A User Manual

When you enable MAC authentication, the client does not supply a 
regular username or password. The MAC address of the user’s device is 
extracted from frames received from the device. 

To authenticate and authorize MAC users via RADIUS, MSS must supply a 
password for MAC users, which is called the outbound authorization 
password. By default, MSS sends the MAC user’s MAC address as that 
user’s password too.

To set the authorization password to a specific value for all MAC users, 
use the following command:

set radius server server-name author-password password

For example, the following command sets the outbound authorization 
password for MAC users on server bigbird to h00per:

WX1200# set radius server bigbird author-password h00per
success: change accepted.

If the MAC address is in the database, MSS uses the VLAN attribute and 
other attributes associated with it for user authorization. Otherwise, MSS 
tries the fallthru authentication type, which can be last-resort, Web, or 
none. 

To reset the authorization password to the default (user’s MAC address), 
clear the RADIUS server, then readd it without specifying the 
authorization password. To clear a RADIUS server, use the clear radius 
server server-name command.