Netgear XCM8806 Chassis User Manual - Page 423

NETGEAR 8800 User Manual To associate a MAC address with one or more ports, specify the ports option when using the following command: configure netlogin add mac-list [ {} | default] {encrypted} {} {ports } You must enable MAC-based network login on the switch and the specified ports. If MAC-based network login is not enabled on the specified port(s), the switch displays a warning message similar to the following: WARNING: Not all specified ports have MAC-Based NetLogin enabled. For a sample configuration, see Secure MAC Configuration Example on page 424. Adding and Deleting MAC Addresses To add a MAC address to the table, use the following command: configure netlogin add mac-list [ {} | default] {encrypted} {} {ports } To remove a MAC address from the table, use the following command: configure netlogin delete mac-list [ {} | default] Displaying the MAC Address List To display the MAC address table, use the following command: show netlogin mac-list When a client needs authentication the best match will be used to authenticate to the server. MAC-based authentication is VR aware, so there is one MAC list per VR. Assume we have a supplicant with MAC address 00:04:96:05:40:00, and the switch has the following table: MAC Address/Mask 00:00:00:00:00:10/48 00:00:00:00:00:11/48 00:00:00:00:00:12/48 00:01:30:70:0C:00/48 00:01:30:32:7D:00/48 00:04:96:00:00:00/24 Password (encrypted yaqu ravdqsr Port(s 1:1-1:5 1:6-1:10 any any any any The user name used to authenticate against the RADIUS server would be "000496000000", as this is the supplicants MAC address with the configured mask applied. Note that the commands are VR aware, and therefore one MAC list table exists per VR. Chapter 16. Network Login | 423