D-Link DWS-1008 User Manual page 291

DWS-1008 User's Manual
Users authorized by MAC address require a MAC authorization password if RADIUS
authentication is desired. The default well-known password is dlink.
Caution: Use this method with care. IEEE 802.11 frames can be forged and can result in
unauthorized network access if MAC authentication is employed.
Adding and Clearing MAC Users and User Groups Locally
MAC users and groups can gain network access only through the switch. They cannot create
administrative connections to the switch. A MAC user is created in a similar fashion to other
local users except for having a MAC address instead of a username. MAC user groups are
created in a similar fashion to other local user groups.
(To create a MAC user profile or MAC user group on a RADIUS server, see the documentation
for your RADIUS server.)
Adding MAC Users and Groups
To create a MAC user group in the local database, you must associate it with an
authorization attribute and value. Use the following command:
set mac-usergroup group-name attr attribute-name value
For example, to create a MAC user group called mac-easters with a 3000-second Session-
Timeout value, type the following command:
DWS-1008# set mac-usergroup mac-easters attr session-timeout 3000
success: change accepted.
To configure a MAC user in the local database and optionally add the user to a group, use
the following command:
set mac-user mac-addr [group group-name]
For example, type the following command to add MAC user 01:0f:03:04:05:06 to group
macfans:
DWS-1008# set mac-user 01:0f:03:04:05:06 group macfans
success: change accepted.
Clearing MAC Users and Groups
To clear a MAC user from a user group, use the following command:
clear mac-user mac-addr group
D-Link Systems, Inc.
Configuring AAA for Network Users
286