Table of Contents
Advertisement
<Configuration example 2>
Overview: Enable MAC authentication for Port 1 to 2.
Isolate the unregistered terminal to VLAN 100.
Specify the authentication destination to RADIUS server. Send
the user name and password in the format of "XX-XX-XX-XX-XX-
XX" for both of them.
Note: Create the following user account to RADIUS server to
have it assigned to VLAN 1 after authentication.
User name: XX-XX-XX-XX-XX-XX
Password: XX-XX-XX-XX-XX-XX
Tunnel-Private-Group-Id=1
1. Set Primary Database for MAC authentication to RADIUS.
2. Move to the interface configuration mode for Port 1, 2.
3. Change PVID for Port 1, 2 to 100.
4. Specify Port 1, 2 as target ports for MAC authentication.
5. Enable MAC authentication.
M24eGi> enable
M24eGi# configure
M24eGi(config)# aaa authentication mac primary radius secondary none
M24eGi(config)# interface GigabitEthernet0/1-2
M24eGi(config-if)# pvid 100
M24eGi(config-if)# exit
M24eGi(config)# mac-authentication port 1-2
M24eGi(config)# mac-authentication
M24eGi(config)# end
M24eGi#
Fig. 4-13-3 Configuration example of MAC authentication (RADIUS
authentication)
337
･･･1
･･･2
･･･3
･･･4
･･･5
Advertisement
Table of Contents
