198 Operation
Chapter 5 - Command Line Interface
5.13 MAC Address Authentication
Use these commands to define MAC authentication on the AP. For local MAC
authentication, first define the default filtering policy using the address filter
default command. Then enter the MAC addresses to be filtered, indicating if they
are allowed or denied. For RADIUS MAC authentication, the MAC addresses and
filtering policy must be configured on the RADIUS server.
5.13.1 address filter default
This command sets filtering to allow or deny listed MAC addresses.
Syntax
address filter default <allowed | denied>
• allowed - Only MAC addresses entered as “denied” in the address filtering table are denied.
• denied - Only MAC addresses entered as “allowed” in the address filtering table are allowed.
Table 5-14: MAC Address Authentication
Command Function Mode Page
address filter default Sets filtering to allow or deny listed addresses GC 198
address filter entry Enters a MAC address in the filter table GC 199
address filter delete Removes a MAC address from the filter table GC 199
mac- authentication server Sets address filtering to be performed with local or remote
options
GC 200
mac- authentication
session-timeout
Sets the interval at which associated clients will be
re-authenticated with the RADIUS server authentication
database
GC 200
show authentication Shows all 802.1X authentication settings, as well as the
address filter table
Exec 196