Filter
Top Products
2-12 Command Line Interface Commands Reference
MAC Address Security Commands
Note: These commands are supported beginning with firmware version 8.5.
security mac-auth mode [ disabled | allow-list | deny-list ]
show security mac-auth mode
These commands allow you to configure or display the global MAC authentication mode. If set to allow-list, all
non-matching unicasts will be dropped. If set to deny-list, all matching unicasts will be dropped.
security mac-auth wireless-only [ yes | no ]
show security mac-auth wireless-only
These commands allow you to restrict or display the restricted status of MAC address authentication. If set to
yes, the MAC authentication applies only to the wireless interface, on models so equipped. If set to no, packets
received at all interfaces on the LAN are subject to the MAC filtering table.
security mac-auth mac-deny MAC-addr
show security mac-deny
These commands allow you to specify or display the MAC address for hosts on the wired or wireless LAN (if so
restricted) whose source or destination MAC address will cause the router to filter their packets.
security mac-auth mac-allow MAC-addr
show security mac-auth mac-allow
These commands allow you to specify or display the MAC address for hosts on the wired or wireless LAN (if so
restricted) whose source or destination MAC address will cause the router to pass their packets.
Note: Wireless MAC authentication commands are also supported. See “Wireless Configuration Commands”
on page 2-86.