Download Enterasys D-Series Specifications

set macauthentication significant-bits
set macauthentication significant-bits
Use this command to set the number of significant bits of the MAC address to use for authentication.
Syntax
set macauthentication significant-bits number
Parameters
number
Specifies the number of significant bits to be used for authentication.
Defaults
None.
Mode
Switch command, read‐write.
Usage
This command allows you to specify a mask to apply to MAC addresses when authenticating users through a RADIUS server. The most common use of significant bit masks is for authentication of all MAC addresses for a specific vendor.
On switches using MAC authentication, the MAC address of a user attempting to log in is sent to the RADIUS server as the user name. If access is denied, and if a significant bit mask has been configured (other than 48) with this command, the switch will apply the mask and resend the masked address to the RADIUS server. For example, if a user with MAC address of 00‐16‐CF‐12‐
34‐56 is denied access, and a 32 bit mask has been configured, the switch will apply the mask and resend a MAC address of 00‐16‐CF‐12‐00‐00 to the RADIUS server.
To use a significant bits mask for authentication of devices by a particular vendor, specify a 24‐bit mask, to mask out everything except the vendor portion of the MAC address. Example
This example sets the MAC authentication significant bits mask to 24.
D2(su)->set macauthentication significant-bits 24
clear macauthentication significant-bits
Use this command to reset the number of significant bits of the MAC address to use for authentication to the default of 48.
Syntax
clear macauthentication significant-bits
Parameters
None.
Defaults
None.
Enterasys D-Series CLI Reference
17-31