Set Macauthentication Significant-Bits; Clear Macauthentication Significant-Bits - Enterasys SECURESTACK C3 Configuration Manual

set macauthentication significant-bits

Use this command to set the number of significant bits of the MAC address to use for
authentication.
Syntax
set macauthentication significant-bits number
Parameters
number
Defaults
None.
Mode
Switch command, read‐write.
Usage
This command allows you to specify a mask to apply to MAC addresses when authenticating
users through a RADIUS server. The most common use of significant bit masks is for
authentication of all MAC addresses for a specific vendor.
On switches using MAC authentication, the MAC address of a user attempting to log in is sent to
the RADIUS server as the user name. If access is denied, and if a significant bit mask has been
configured (other than 48) with this command, the switch will apply the mask and resend the
masked address to the RADIUS server. For example, if a user with MAC address of 00‐16‐CF‐12‐
34‐56 is denied access, and a 32 bit mask has been configured, the switch will apply the mask and
resend a MAC address of 00‐16‐CF‐12‐00‐00 to the RADIUS server.
To use a significant bits mask for authentication of devices by a particular vendor, specify a 24‐bit
mask, to mask out everything except the vendor portion of the MAC address.
Example
This example sets the MAC authentication significant bits mask to 24.
C3(su)->set macauthentication significant-bits 24

clear macauthentication significant-bits

Use this command to reset the number of significant bits of the MAC address to use for
authentication to the default of 48.
Syntax
clear macauthentication significant-bits
Parameters
None.
Defaults
None.
Specifies the number of significant bits to be used for authentication.
set macauthentication significant-bits
SecureStack C3 Configuration Guide 26-35