MSM7xx Controllers Configuration Guide v6.4.0

Switch portVSC
MAC addresses are validated against a global list that is
defined on the controller and applies across all devices.
MAC addresses are validated against a custom list for
each VSC.
See “Configuring MAC-based filters on an HP 517 or
MSM317 switch port” (page 345).
See “Configuring MAC-based filters on a VSC” (page 344).
NOTE: MAC-based filter are always applied before MAC-based authentication.
Configuring global MAC-based authentication
You define global MAC-based authentication settings using the Colubris-AVPair value string
mac-address, which you must add to the RADIUS account for the controller. See “Global
MAC-based authentication” (page 476).
Although the global MAC-based authentication settings apply to all VSCs that have HTML-based
user logins enabled, each VSC can use a different authentication server to validate user credentials.
To define an authentication server for a VSC, open the Add/Edit Virtual Service Community page
and use the HTML-based user logins box to select the authentication method. See “HTML-based
user logins” (page 132).
MAC authentication is performed before HTML authentication. If MAC authentication fails, the
users connection is terminated. If it succeeds, and HTML authentication is enabled, HTML
authentication is performed next.
MAC-based authentication 341