User Authentication
3-79
3
CLI – This example displays all entries currently in the secure MAC address table.
Configuring MAC Address Filters
MAC address filters are used to specify MAC addresses to be excluded from
network access authentication. MAC addresses in a filter are not authenticated by a
RADIUS server when seen on a port, the addresses are immediately added to the
secure MAC address table.
MAC address filters must first be created and assigned a filter ID, then the filter can
be applied to a port interface. Multiple MAC addresses can be included in a filter, but
only one filter can be applied to a port.
Command Attributes
• Query – Display all current MAC address filters or a specific filter configuration.
• Add/Remove – Specify a filter ID and MAC address to create a filter. Specify the
same filter ID with other MAC addresses to add them to the filter. Select an entry
in the displayed list and click Remove to delete a MAC address from a filter.
• Filter ID – Specifies a filter to configure. (Range: 1 -64)
• MAC Address – Specifies a single MAC address to add to a filter.
Web – Click Security, Network Access, MAC Filter Configuration.
Figure 3-46 Network Access MAC Filter Configuration
Console#show network-access mac-address-table 4-100
---- ----------------- --------------- --------- -------------------------
Port MAC-Address RADIUS-Server Attribute Time
---- ----------------- --------------- --------- -------------------------
1/1 00-00-01-02-03-04 172.155.120.17 Static 00d06h32m50s
1/1 00-00-01-02-03-05 172.155.120.17 Dynamic 00d06h33m20s
1/1 00-00-01-02-03-06 172.155.120.17 Static 00d06h35m10s
1/3 00-00-01-02-03-07 172.155.120.17 Dynamic 00d06h34m20s
Console#