Table of Contents
Advertisement
6
System Configuration
address filter delete command. To display the current settings, use the show
authentication command from the Exec mode.
DUAL OUTDOOR(config)#mac-authentication server local
DUAL OUTDOOR(config)#address filter default denied
DUAL OUTDOOR(config)#address filter entry 00-70-50-cc-99-1a
denied
DUAL OUTDOOR(config)#address filter entry 00-70-50-cc-99-1b allowed
DUAL OUTDOOR(config)#address filter entry 00-70-50-cc-99-1c allowed
DUAL OUTDOOR(config)#address filter delete 00-70-50-cc-99-1c
DUAL OUTDOOR(config)#exit
DUAL OUTDOOR#show authentication
Authentication Information
=========================================================
MAC Authentication Server
MAC Auth Session Timeout Value : 300 secs
802.1x
Broadcast Key Refresh Rate
Session Key Refresh Rate
802.1x Session Timeout Value
Address Filtering
System Default : DENY addresses not found in filter table.
Filter Table
MAC Address
-----------------
00-70-50-cc-99-1a
00-70-50-cc-99-1b
=========================================================
DUAL OUTDOOR#
CLI Commands for RADIUS MAC Authentication – Use the mac-authentication
server command from the global configuration mode to enable remote MAC
authentication. Set the timeout value for re-authentication using the
mac-authentication session-timeout command. Be sure to also configure
connection settings for the RADIUS server (not shown in the following example). To
6-14
: LOCAL
: DISABLED
: 5 min
: 5 min
: 300 secs
: DENIED
Status
----------
DENIED
ALLOWED
7-39
7-37
7-38
7-38
7-40
Advertisement
Table of Contents
