Security
CLI Commands for Local MAC Authentication
Use the mac‐authentication server command from the Interface Wireless or Interface Wireless:
VAP configuration modes to enable local MAC authentication. Set the default behavior (allow or
deny) for all unknown MAC addresses using the mac‐access permission command. Use the mac‐
access entry command to update the local table by entering, changing and removing MAC
addresses.
RoamAbout 3000#configure
Enter configuration commands, one per line. End with CTRL/Z
RoamAbout 3000(config)#interface wireless g
Enter Wireless configuration commands, one per line.
RoamAbout 3000(if-wireless g)#mac-access entry 00-01-f4-88-b3-d6 allowed
RoamAbout 3000(if-wireless g)#
RoamAbout 3000(if-wireless g)#mac-access entry 00-01-f4-88-b3-d6 denied
This MAC address 00-01-f4-cc-99-1a filter permission status has been changed !!
RoamAbout 3000(if-wireless g)#
RoamAbout 3000(if-wireless g)# mac-access entry 00-01-f4-88-b3-d6 delete
RoamAbout 3000(if-wireless g)#vap 4
RoamAbout 3000(if-wireless g: VAP[4])#mac-access entry 00-00-11-22-33-44
allowed
RoamAbout 3000(if-wireless g: VAP[4])#end
RoamAbout 3000(if-wireless g)#
To display the current settings, use the show authentication command from the Exec mode.
4-70 Advanced Configuration