Configuration Commands For Mac Authentication; Configuring The Global Mac Authentication Password - HP ProCurve 6120G/XG Manual

Configuration Commands for MAC Authentication

Command
Configuration Level
aaa port-access mac-based password <password-value>
aaa port-access mac-based addr-format
[no] aaa port-access mac-based [e] < port-list >
[addr-limit]
[addr-moves]
[auth-vid]
[logoff-period]
[max-requests]
[quiet-period]
[reauth-period]
[reauthenticate]
[server-timeout]
[unauth-vid]

Configuring the Global MAC Authentication Password

MAC authentication only requires that an entry is placed in the user database
with the device's MAC address as both the username and the password,
creating the opportunity for malicious device spoofing using the readily
available MAC address. To make spoofing more difficult, the global password
option allows a network administrator to configure a common MAC authen­
tication password that is used for all MAC authentications sent to the RADIUS
server.
When implementing the global MAC authentication password option, it is
important that the user database on the RADIUS server has the MAC authen­
tication password as the password for each device performing MAC authen­
tication.
Use this command to configure the global MAC authentication password.
Syntax: [no] aaa port-access mac-based password <password-value>
Specifies the global password to be used by all MAC
authenticating devices.
The no form of the command disables the feature.
Web and MAC Authentication
Configuring MAC Authentication on the Switch
Page
3-51
3-51
3-53
3-53
3-54
3-54
3-54
3-54
3-54
3-55
3-55
3-55
3-55
3-51