Enterasys Networks Enterasys D2 D2G124-12P - Manual (Page 453)

set macauthentication significant-bits
D-Series CLI Reference 15-29
Example
This example shows how to globally clear the MAC reauthentication period:
D2(su)->clear macauthentication reauthperiod
set macauthentication significant-bits
Use this command to set the number of significant bits of the MAC address to use for
authentication.
Syntax
set macauthentication significant-bits number
Parameters
Defaults
None.
Mode
Switch command, read‐write.
Usage
This command allows you to specify a mask to apply to MAC addresses when authenticating
users through a RADIUS server. The most common use of significant bit masks is for
authentication of all MAC addresses for a specific vendor.
On switches using MAC authentication, the MAC address of a user attempting to log in is sent to
the RADIUS server as the user name. If access is denied, and if a significant bit mask has been
configured (other than 48) with this command, the switch will apply the mask and resend the
masked address to the RADIUS server. For example, if a user with MAC address of 00‐16‐CF‐12‐
34‐56 is denied access, and a 32 bit mask has been configured, the switch will apply the mask and
resend a MAC address of 00‐16‐CF‐12‐00‐00 to the RADIUS server.
To use a significant bits mask for authentication of devices by a particular vendor, specify a 24‐bit
mask, to mask out everything except the vendor portion of the MAC address.
Example
This example sets the MAC authentication significant bits mask to 24.
D2(su)->set macauthentication significant-bits 24
clear macauthentication significant-bits
Use this command to reset the number of significant bits of the MAC address to use for
authentication to the default of 48.
Syntax
clear macauthentication significant-bits
number Specifies the number of significant bits to be used for authentication.