
Chapter 24 User/Group
NXC CLI Reference Guide
173
24.2.4 MAC Auth Commands
This table lists the commands for mappings MAC addresses to MAC address user accounts.
24.2.4.1 MAC Auth Example
This example uses an external server to authenticate wireless clients by MAC address. After
authentication the NXC maps the wireless client to a mac-address user account (MAC role).
Configure user-aware features to control MAC address user access to network services.
The following commands:
• Create a MAC role (mac-address user type user account) named ZyXEL-mac
• Map a wireless client’s MAC address of 00:13:49:11:a0:c4 to the ZyXEL-mac MAC role
(MAC address user account)
• Modify the WLAN security profile named secureWLAN1 as follows:
• Turn on MAC authentication
• Use the authentication method named Auth1
• Use colons to separate the two-character pairs within account MAC addresses
Table 100 mac-auth Commands Summary
COMMAND DESCRIPTION
[no] mac-auth database mac mac address type
ext-mac-address mac-role username description
description
Maps the specified MAC address authenticated by
an external server to the specified MAC role (MAC
address user account).
The
no command deletes the mapping between
the MAC address and the MAC role.
[no] mac-auth database mac mac address type
int-mac-address mac-role username description
description
Maps the specified MAC address authenticated by
the NXC’s local user database to the specified
MAC role (MAC address user account).
The no command deletes the mapping between
the MAC address and the MAC role.
[no] mac-auth database mac oui type ext-oui
mac-role username description description
Maps the specified
OUI (Organizationally Unique
Identifier)
authenticated by an external server to
the specified MAC role (MAC address user
account). The OUI is the first three octets in a MAC
address and uniquely identifies the manufacturer of
a network device.
The
no command deletes the mapping between
the OUI and the MAC role.
[no] mac-auth database mac oui type int-oui
mac-role username description description
Maps the specified
OUI (Organizationally Unique
Identifier)
authenticated by the NXC’s local user
database to the specified MAC role (MAC address
user account). The OUI is the first three octets in a
MAC address and uniquely identifies the
manufacturer of a network device.
The
no command deletes the mapping between
the OUI and the MAC role.
Comentarios a estos manuales