mu-mac

Configures a MAC address and mask based filter for this role policy

Supported on the following devices:

Access Points: AP5010, AP310i/e, AP410i/e, AP505i, AP510i, AP510e, AP560i, AP6522, AP6562, AP7161, AP7502, AP7522, AP7532, AP7562, AP7602, AP7612, AP7622, AP763, AP7662, AP8163, AP8543, AP8533.
Service Platforms: NX5500, NX7500, NX9500, NX9600
Virtual Platforms: CX9000, VX9000

Syntax

mu-mac [<MAC>|any]

mu-mac any

mu-mac <MAC> {mask <MAC>}

Parameters

mu-mac any


any	Applies role to any wireless client (no MAC address to match). This is the default setting.

mu-mac <MAC> {mask <MAC>}


<MAC>	Applies role to the wireless client having specified MAC address <MAC> – Sets the MAC address in the AA-BB-CC-DD-EE-FF format
mask <MAC>	Optional. After specifying the client‘s MAC address, specify the mask in the AA-BB-CC-DD-EE-FF format. The role is applied to the wireless client exactly matching the specified MAC address and MAC mask.

Examples

nx9500-6C8809(config-role-policy-test-user-role-testing)#mu-mac 11-22-33-44-55-66

nx9500-6C8809(config-role-policy-test-user-role-testing)#show context
 user-role testing precedence 10
  authentication-type eq kerberos
  encryption-type eq wep128
  ap-location contains office
  mu-mac 11-22-33-44-55-66
  group contains testgroup
  captive-portal authentication-state pre-login
  city exact SanJose
  company exact ExampleCompany
  country exact America
  department exact TnV
  emailid exact testing@examplecompany.com
  employeeid contains TnVTest1
nx9500-6C8809(config-role-policy-test-user-role-testing)#

Related Commands


no	Removes the MAC address and mask for this user-defined role