Adding And Clearing Mac Users And User Groups Locally - Nortel 2300 Series Configuration Manual

426 Configuring AAA for Network Users

Adding and Clearing MAC Users and User Groups Locally

MAC users and groups can gain network access only through the WSS switch. They cannot create administrative
connections to the WSS switch. A MAC user is created in a similar fashion to other local users except for having a MAC
address instead of a username. MAC user groups are created in a similar fashion to other local user groups.
(To create a MAC user profile or MAC user group on a RADIUS server, see the documentation for your RADIUS
server.)
Adding MAC Users and Groups
To create a MAC user group in the local WSS database, you must associate it with an authorization attribute and value.
Use the following command:
set mac-usergroup group-name attr attribute-name value
For example, to create a MAC user group called mac-easters with a 3000-second Session-Timeout value, type the
following command:
23x0# set mac-usergroup mac-easters attr session-timeout 3000
success: change accepted.
To configure a MAC user in the local database and optionally add the user to a group, use the following command:
set mac-user mac-addr [group group-name]
For example, type the following command to add MAC user 01:0f:03:04:05:06 to group macfans:
23x0# set mac-user 01:0f:03:04:05:06 group macfans
success: change accepted.
Clearing MAC Users and Groups
To clear a MAC user from a user group, use the following command:
clear mac-user mac-addr group
For example, the following command removes MAC user 01:0f:03:04:05:06 from group macfans:
23x0# clear mac-user 01:0f:03:04:05:06 group
success: change accepted.
The clear mac-usergroup command removes the group.
To remove a MAC user profile from the local database on the WSS switch, type the following command:
clear mac-user mac-address
For example, the following command removes MAC user 01:0f:03:04:05:06 from the local database:
23x0# clear mac-user 01:0f:03:04:05:06
success: change accepted.
320657-A