Enterasys Networks D2G124-12 Manual

A SERVICE OF

next previous

set macauthentication significant-bits

D-Series CLI Reference 15-29

Example

ThisexampleshowshowtogloballycleartheMACreauthenticationperiod:

D2(su)->clear macauthentication reauthperiod

set macauthentication significant-bits

UsethiscommandtosetthenumberofsignificantbitsoftheMACaddresstousefor

authentication.

Syntax

set macauthentication significant-bits number

Parameters

Defaults

None.

Mode

Switchcommand,read‐write.

Usage

ThiscommandallowsyoutospecifyamasktoapplytoMACaddresseswhenauthenticating

usersthroughaRADIUSserver.Themostcommonuseofsignificantbitmasksisfor

authenticationofallMACaddressesforaspecificvendor.

OnswitchesusingMACauthentication,theMACaddressofauserattempting

tologinissentto

theRADIUSserverastheusername.Ifaccessisdenied,andifasignificantbitmaskhasbeen

configured(otherthan48)withthiscommand,theswitchwillapplythemaskandresendthe

maskedaddresstotheRADIUSserver.Forexample,ifa

userwithMACaddressof00‐16‐CF‐12‐

34‐56isdeniedaccess,anda32bitmaskhasbeenconfigured,theswitchwillapplythemaskand

resendaMACaddressof00‐16‐CF‐12‐00‐00totheRADIUSserver.

Touseasignificantbitsmaskfor

authenticationofdevicesbyaparticularvendor,specifya24‐bit

mask,tomaskouteverythingexceptthevendorportionoftheMACaddress.

Example

ThisexamplesetstheMACa uthenti cationsignificantbitsmaskto24.

D2(su)->set macauthentication significant-bits 24

clear macauthentication significant-bits

UsethiscommandtoresetthenumberofsignificantbitsoftheMACaddresstousefor

authenticationtothedefaultof48.

Syntax

clear macauthentication significant-bits

number Specifiesthenumberofsignificantbitstobeusedforauthentication.