Brocade Mobility RFS Controller CLI Reference Guide (Supporting software release 5.5.0.0 and later) User Manual
Page 780
Brocade Mobility RFS Controller CLI Reference Guide
767
53-1003098-01
7
<DEVICE-A>(config)#aaa-policy macauth
<DEVICE-A>(config-aaa-policy-macauth)#authentication server <1-6> [host
<IP>|onboard]
Attach the AAA policy to the device or profile. When attached to a profile, the AAA policy is
applied to all devices using this profile.
<DEVICE>(config-device-aa-bb-cc-dd-ee)#mac-auth use aaa-policy macauth
<DEVICE>(config-profile-<DEVICE-PROFILE-NAME>)#mac-auth use aaa-policy
macauth
3. Enable mac-auth on the device’s desired GE port. When enabled on a profile, MAC address
authentication is enabled, on the specified GE port, of all devices using this profile.
<DEVICE>(config-device-aa-bb-cc-dd-ee)#interface ge x
<DEVICE>(config-device-aa-bb-cc-dd-ee-gex)#mac-auth
<DEVICE>(config-profile-<PROFILE-NAME>)#interface ge x
<DEVICE>(config-profile-<PROFILE-NAME>)#mac-auth
Supported in the following platforms:
•
Wireless Controllers — Brocade Mobility RFS4000, Brocade Mobility RFS6000, Brocade
Mobility RFS7000
Syntax:
mac-auth use aaa-policy <AAA-POLICY-NAME>
Parameters
mac-auth use aaa-policy <AAA-POLICY-NAME>
Example
The following examples demonstrate the configuration of authentication of MAC
addresses on wired ports:
rfs4000-229D58(config-aaa-policy-mac-auth)#authentication server 1 onboard
controller
rfs4000-229D58(config-aaa-policy-mac-auth)#show context
aaa-policy mac-auth
authentication server 1 onboard controller
rfs4000-229D58(config-aaa-policy-mac-auth)#
rfs4000-229D58(config)#radius-group RG
rfs4000-229D58(config-radius-group-RG)#policy vlan 11
rfs4000-229D58(config-radius-group-RG)#show context
radius-group RF
policy vlan 11
rfs4000-229D58(config-radius-group-RG)#
mac-auth
Enables 802.1X authentication of MAC addresses on this profile. Use the device configuration mode to
enable this feature on a device.
use aaa-policy
<AAA-POLICY-NAME>
Associates an existing AAA policy with this profile (or device)
•
<AAA-POLICY NAME> – Specify the AAA policy name.
The AAA policy used should be created especially for MAC authentication.