Users Guide

60 | Configuration Reference Dell PowerConnect W-AirWave 7.4 | Configuration Guide
3. Select Add or Save. The added or edited IPv6 Extension Header profile appears on the IPv6 Extension
Header details page.
Profiles > AAA > MAC Auth
Before configuring MAC-based authentication, you must configure the following:
 The user role that will be assigned as the default role for the MAC-based authenticated clients. You configure
the default user role for MAC-based authentication in the AAA profile. If derivation rules exist or if the client
configuration in the internal database has a role assignment, these values take precedence over the default
user role.
 Authentication server group that the controller uses to validate the clients. The internal database can be used
to configure the clients for MAC-based authentication.
Perform these steps to configure a MAC Auth profile.
1. Select Profiles > AAA > MAC Auth in the navigation pane.
2. Select the Add button to create a new MAC Auth profile, or click the pencil icon next to an existing profile to
edit. Complete the settings as described in Table 13:
Denied Extension Header Filter Items
Match IPv6 Header Type
(0-255)
hop-by-hop Specify one of the following EH types:
 authentication: Matches the IPv6 authentication header
 dest-option: Matches the IPv6 destination-option header
 esp: Matches the IPv6 encapsulation security payload header
 fragment: Matches the IPv6 fragment header
 hop-by-hop: Matches the IPv6 hop-by-hop header
 mobility: Matches the IPv6 mobility header
 routing: Matches the IPv6 routing header
Table 13 Profiles > AAA > MAC Auth Profile Settings
Field Default Description
General Settings
Folder Top Set the folder with which the profile is associated. The drop-down menu displays all
folders available for association with the profile.
Name Blank Enter the name of the MAC Auth profile.
Other Settings
Delimiter none Delimiter used in the MAC string:
 colon specifies the format xx:xx:xx:xx:xx:xx
 dash specifies the format xx-xx-xx-xx-xx-xx
 none specifies the format xxxxxxxxxxxx
 oui-nic specifies the format xxxxxx-xxxxxx (use the client device’s OUI as a
delimiter) - for 6.1.0.0 versions or later
Case lower The case (upper or lower) used in the MAC string.
Max Authentication
Failures (0-10)
0 Number of times a station can fail to authenticate before it is blacklisted. A value of 0
disables blacklisting.
Table 12 Profiles > AAA > IPv6 Extension Header Profile Settings
Field Default Description