Configuration without using mac-groups

Procedure
  1. Create 3 LMA profiles
  2. aaa port-access local-mac profile “corp-pc-prof” vlan untagged 2 (for corporate PCs)
  3. aaa port-access local-mac profile “rest-pc-prof” vlan untagged 3 (for the rest of PCs)
  4. aaa port-access local-mac profile “corp-phone-prof” vlan tagged 5 (for phones)
  5. Associate hosts directly to profiles 
    
aaa port-ac local-mac apply profile corp-pc-prof   mac-addr   002622bba7ac

    
aaa port-ac local-mac apply profile rest-pc-prof   mac-mask 002622bb/32

    
aaa port-ac local-mac apply profile rest-pc-prof  mac-mask  002622bc/32

    
aaa port-ac local-mac apply profile corp-phone-prof   mac-oui  008011
  6. Enable LMA on ports 
    
aaa port-ac local-mac-auth <ports>