Using MAC pinning in User Roles

Instead of using MAC pinning on a per-port basis which limits where the devices are added, a colorless port configuration is achieved by configuring MAC pinning in local, or downloadable user roles. By adding MAC Pinning to user roles, the same port can have a client whose MAC never ages out (as long as the link is up), and other clients whose MACs are not pinned to the MAC table.

To enable MAC Pinning in User Roles, set the logoff-period to zero seconds instead of executing the mac-pin CLI. The following example shows the configuration of a printer user role by setting logoff-period to zero:

switch(config)# show user-role PRINTER
User Role Information
   Name                              : PRINTER
   Type                              : local
   Reauthentication Period (seconds) : 0
   Logoff Period (seconds)           : 0
   Untagged VLAN                     : 1
   Tagged VLAN                       :
   Captive Portal Profile            :
   Policy                            :
   Tunnelednode Server Redirect      : Disabled
   Secondary Role Name               :