244 CHAPTER 8: AAA C OMMANDSUsage — You can configure different authentication methods fordifferent groups of MAC addresses by “globbing.” (For details, see “UserGlobs, MAC Address Globs, and VLAN Globs” on page 28.)If you specify multiple authentication methods in the set authenticationmac command, MSS applies them in the order in which they appear inthe command, with these results:If the first method responds with pass or fail, the evaluation is final.If the first method does not respond, MSS tries the second method, and so on.However, if local appears first, followed by a RADIUS server group, MSSignores any failed searches in the local WX database and sends anauthentication request to the RADIUS server group.If the switch’s configuration contains a set authentication maccommand that matches the SSID the user is attempting to access and theuser’s MAC address, MSS uses the method specified by the command.Otherwise, MSS uses local MAC authentication by default.If the username does not match an authentication rule for the SSID theuser is attempting to access, MSS uses the fallthru authentication typeconfigured for the SSID, which can be last-resort, web (for WebAAA),or none.Examples — To use the local WX database to authenticate all users whoaccess the mycorp2 SSID by their MAC address, type the followingcommand:WX4400# set authentication ssid mycorp2 mac ** localsuccess: change accepted.See Also clear authentication mac on page 212 display aaa on page 223 set authentication admin on page 233 set authentication console on page 235 set authentication dot1x on page 237 set authentication last-resort on page 240 set authentication web on page 246
