Users Guide

280 | MAC-based Authentication Dell Networking W-Series ArubaOS 6.4.x| User Guide
Parameter Description
Delimiter Delimiter used in the MAC string:
l colon specifies the format Xx:XX:XX:XX:XX:XX
l dash specifies the format XX-XX-XX-XX-XX-XX
l none specifies the format XXXXXXXXXXXX
l oui-nic specifies the format XXXXXX:XXXXXX
Default: none
NOTE: This parameter is available for the aaa authentication-server
radius command.
Case The case (upper or lower) used in the MAC string.
Default: lower
Max Authentication failures Number of times a station can fail to authenticate before it is blacklisted.
A value of zero disables blacklisting.
Default: zero (0)
Table 53: MAC Authentication Profile Configuration Parameters
In the WebUI
1. Navigate to the Configuration > Security > Authentication > L2 Authentication page.
2. Select MAC Authentication Profile.
3. Enter a profile name and click Add.
4. Select the profile name to display configurable parameters.
5. Configure the parameters, as described in Table 53.
6. Click Apply.
In the CLI
Execute the following command to configure a MACauthentication profile:
(host)(configure) #aaa authentication mac <profile>
case {lower|upper}
delimiter {colon|dash|none}
max-authentication-failures <number>
Configuring Clients
You can create entries in the controller’s internal database to authenticate client MAC addresses. The internal
database contains a list of clients along with the password and default role for each client. To configure entries
in the internal database for MAC authentication, you enter the MAC address for both the username and
password for each client.
You must enter the MAC address using the delimiter format configured in the MAC authentication profile. The
default delimiter is none, which means that MAC addresses should be in the format xxxxxxxxxxxx. If you specify
colons for the delimiter, you can enter MAC addresses in the format xx:xx:xx:xx:xx:xx.