Cisco PIX 525 Dokumentacja Pobierz pdf (Strona 280)

100

101

16-12

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 16 Applying AAA for Network Access

Using MAC Addresses to Exempt Traffic from Authentication and Authorization

To use MAC addresses to exempt traffic from authentication and authorization, perform the following

steps:

Step 1 To configure a MAC list, enter the following command:

hostname/contexta(config)# mac-list

{deny | permit}

mac

macmask

where id is the hexadecimal number that you assign to the MAC list, mac is the MAC address of the

computer whose traffic you want to permit or deny, and macmask is a MAC address mask. For more

information about the mac-list command, see the Cisco Security Appliance Command Reference.

Step 2 To exempt traffic for the MAC addresses specified in a particular MAC list, enter the following

command:

hostname/contexta(config)# aaa mac-exempt match

where id is the string identifying the MAC list containing the MAC addresses whose traffic is to be

exempt from authentication and authorization.

The following commands create two MAC lists, each consisting of a single MAC address. One permits

traffic from its MAC address while the other denies traffic from its MAC address. The final two

commands configure the security appliance to exempt from authentication and authorization any traffic

originating from the MAC addresses in the two lists.

hostname/contexta(config)# mac-list adc permit 00a0.cp5d.0282 ffff.ffff.ffff

hostname/contexta(config)# mac-list ac deny 0061.54ff.b440 ffff.ffff.ffff

hostname/contexta(config)# aaa mac-exempt match adc

hostname/contexta(config)# aaa mac-exempt match ac

1 2 ... 275 276 277 278 279 280 281 282 283 284 285 ... 603 604

Komentarze do niniejszej Instrukcji

Brak uwag

Cisco PIX 525 Dokumentacja Strona 280

Komentarze do niniejszej Instrukcji