Configuring the Printer Cluster for MAC-Based Authentication
Perform the following tasks to configure MAC-based authentication for the printer cluster in our example:
- Set up an account for each printer on the authentication server that contains the printer MAC address, the MAC authentication password configured on the switch, and a RADIUS filter ID entry specifying the printer policy.
- Configure a policy using the policy manager specifying the printer cluster VLAN and optionally configuring a CoS and rate limit.
- Enable MAC authentication globally on the switch.
- Enter the MAC authentication password as enterasys on the switch.
- Set the MAC authentication significant-bits to 24.
- Enable MAC authentication on the ports used by the printer cluster: ge.1.3-4
- Enable the quarantine and auto-tracking agents on ports ge.1.3-4
With the authentication server configured with a RADIUS account for each printer, and the printer policy preconfigured, enter the following CLI input:
System(rw)->set macauthentication enable
System(rw)->set macauthentication password enterasys
System(rw)->set macauthentication significant-bits 24
System(rw)->set macauthentication port enable ge.1.3-4
System(rw)->set quarantine-agent port enable ge.1.3-4
System(rw)->set auto-tracking port enable ge.1.3-4
This completes the printer cluster MAC authentication configuration.