Configuring the Printer Cluster for MAC-Based Authentication

Perform the following tasks to configure MAC-based authentication for the printer cluster in our example:

  • Set up an account for each printer on the authentication server that contains the printer MAC address, the MAC authentication password configured on the switch, and a RADIUS filter ID entry specifying the printer policy.
  • Configure a policy using the policy manager specifying the printer cluster VLAN and optionally configuring a CoS and rate limit.
  • Enable MAC authentication globally on the switch.
  • Enter the MAC authentication password as enterasys on the switch.
  • Set the MAC authentication significant-bits to 24.
  • Enable MAC authentication on the ports used by the printer cluster: ge.1.3-4
  • Enable the quarantine and auto-tracking agents on ports ge.1.3-4

With the authentication server configured with a RADIUS account for each printer, and the printer policy preconfigured, enter the following CLI input:

System(rw)->set macauthentication enable
System(rw)->set macauthentication password enterasys
System(rw)->set macauthentication significant-bits 24
System(rw)->set macauthentication port enable ge.1.3-4
System(rw)->set quarantine-agent port enable ge.1.3-4
System(rw)->set auto-tracking port enable ge.1.3-4

This completes the printer cluster MAC authentication configuration.