SMC Networks 2555W-AG2 User Manual page 69

CLI Commands for Local MAC Authentication – Use the mac-authentication
server command from the global configuration mode to enable local MAC
authentication. Use the mac-authentication session-timeout command to set the
authentication interval. Set the default action for MAC addresses not in the local
table using the address filter default command, then enter MAC addresses in the
local table using the address filter entry command. To remove an entry from the
table, use the address filter delete command. To display the current settings, use
the show authentication command from the Exec mode.
Enterprise AP(config)#mac-authentication server local
Enterprise AP(config)#mac-authentication session-timeout 5
Enterprise AP(config)#address filter default denied
Enterprise AP(config)#address filter entry
00-70-50-cc-99-1a denied
Enterprise AP(config)#address filter entry
00-70-50-cc-99-1b allowed
Enterprise AP(config)#address filter entry
00-70-50-cc-99-1c allowed
Enterprise AP(config)#address filter delete
00-70-50-cc-99-1c
Enterprise AP(config)#exit
Enterprise AP#show authentication
Authentication Information
===========================================================
MAC Authentication Server
MAC Auth Session Timeout Value : 0 min
802.1x supplicant
802.1x supplicant user
802.1x supplicant password
Address Filtering
System Default : ALLOW addresses not found in filter table.
Filter Table
MAC Address
-----------------
00-70-50-cc-99-1a
00-70-50-cc-99-1b
=========================================================
Enterprise AP#
: LOCAL
: DISABLED
: EMPTY
: EMPTY
: DENIED
Status
----------
DENIED
ALLOWED
Advanced Configuration
7-71
7-71
7-69
7-70
7-70
7-67
6
6-15