Adding and Clearing MAC Users and User Groups Locally
MAC users and groups can gain network access only through the switch.
They cannot create administrative connections to the switch. A MAC user is created in a similar fashion
to other local users except for having a MAC address instead of a username. MAC user groups are
created in a similar fashion to other local user groups.
(To create a MAC user profile or MAC user group on a RADIUS server, refer to the documentation for
your RADIUS server.)
To create a MAC user group in the local database, you must associate it with an authorization attribute
and value. Use the following command:
set mac-usergroup group-name attr attribute-name value
For example, to create a MAC user group called mac-easters with a 3000-second Session-Timeout
value, type the following command:
DWS-1008# set mac-usergroup mac-easters attr session-timeout 3000
success: change accepted.
To configure a MAC user in the local database and optionally add the user to a group, use the following
command:
set mac-user mac-addr [group group-name]
For example, type the following command to add MAC user 01:0f:03:04:05:06 to group macfans:
DWS-1008# set mac-user 01:0f:03:04:05:06 group macfans
success: change accepted.
To clear a MAC user from a user group, use the following command:
clear mac-user mac-addr group
For example, the following command removes MAC user 01:0f:03:04:05:06 from the group the user is
in:
DWS-1008# clear mac-user 01:0f:03:04:05:06 group
success: change accepted.
The clear mac-usergroup command removes the group.
To remove a MAC user profile from the local database on the switch, type the following command:
clear mac-user mac-address
D-Link DWS-1008 User Manual
Adding MAC Users and Groups
Clearing MAC Users and Groups
88