Configures a MAC address and mask based filter for this role policy

Supported in the following platforms:

  • Access Points — AP505i, AP510i/e, AP560i/h
  • Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000


mu-mac [<MAC>|any]
mu-mac any
mu-mac <MAC> {mask <MAC>}


mu-mac any


Applies role to any wireless client (no MAC address to match). This is the default setting.
mu-mac <MAC> {mask <MAC>}


Applies role to the wireless client having specified MAC address

  • <MAC> – Sets the MAC address in the AA-BB-CC-DD-EE-FF format

mask <MAC>

Optional. After specifying the client‘s MAC address, specify the mask in the

  • AA-BB-CC-DD-EE-FF format. The role is applied to the wireless client exactly matching the specified MAC address and MAC mask.


nx9500-6C8809(config-role-policy-test-user-role-testing)#mu-mac 11-22-33-44-55-66
nx9500-6C8809(config-role-policy-test-user-role-testing)#show context
 user-role testing precedence 10
  authentication-type eq kerberos
  encryption-type eq wep128
  ap-location contains office
  mu-mac 11-22-33-44-55-66
  group contains testgroup
  captive-portal authentication-state pre-login
  city exact SanJose
  company exact ExampleCompany
  country exact America
  department exact TnV
  emailid exact
  employeeid contains TnVTest1

Related Commands


Removes the MAC address and mask for this user-defined role