mac-auth

interface-config-ge-instance

Enables authentication of MAC addresses on the selected wired port. When enabled, this feature authenticates the MAC address of a device, connecting to this interface, with a RADIUS server. When successfully authenticated, packets from the source are processed. Since only one MAC address is supported per wired port, packets from all other sources are dropped.

For more information on enabling this feature, see mac-auth.

Enable port MAC authentication in conjunction with Wired 802.1x settings to configure a MAC authentication AAA policy.

This option is also available in the device configuration mode.

Supported in the following platforms:

Access Points — AP310i/e, AP410i/e, AP460i/e, AP560i/h, AP510i/e, AP505i, AP7522, AP7532, AP7562, AP7612, AP7632, AP7662, AP8432, AP8533
Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

mac-auth

Parameters

None

Example

nx9500-6C8809(config-profile-testnx5500-if-ge1)#mac-auth

nx9500-6C8809(config-profile-testnx5500-if-ge1)#show context
 interface ge1
  mac-auth
  ip dhcp trust
  qos trust dscp
  qos trust 802.1p
  channel-group 1
nx9500-6C8809(config-profile-testnx5500-if-ge1)#

nx9500-6C8809(config-profile-testnx5500-if-ge1)#mac-auth

nx9500-6C8809(config-profile-testnx5500-if-ge1)#show context
 interface ge5
  switchport mode access
  switchport access vlan 1
  dot1x authenticator host-mode single-host
  dot1x authenticator guest-vlan 5
  dot1x authenticator port-control auto
  mac-auth
nx9500-6C8809(config-profile-testnx5500-if-ge1)#

Related Commands


no	Disables authentication of MAC addresses on the selected wired port