Configuration commands

The configuration strategy below shows the configuration commands that LMA supports. All LMA commands can be prefixed with no. For port based commands, a VLAN must be created.

Procedure
  1. Enable local mac authentication on switch port ‘1’
    switch(config)#aaa port-access local-mac 1
  2. Create mac-group, ‘ip-phone-grp’ for IP phones. The newly created group becomes editable. So, the user can add/delete mac-oui from the mac-group.
    switch(config)#aaa port-access local-mac mac-group ip-phone-grp
  3. or create mac-group, ‘hpephone-grp’, from the default (factory-shipped) ‘hpe-ip-phones’ group
    switch(config)#aaa port-access local-mac mac-group default hpe-ip-phones hpphones-grp
  4. Note: To determine the factory-shipped default mac-groups, use show port-access local-mac mac-group default
  5. Associate mac-address, 005557-9B688B to a mac-group, hpephone-grp
    switch(config)#aaa port-access local-mac mac-group hpephones-grp mac-addr005557-9B688B
  6. Create LMA profile, ip-phone-prof, with attributes, tagged vlan, 2, untagged vlan, 3 and cos 2
    switch(config)#aaa port-access local-mac profile ip-phone-prof vlan tagged 2 untagged 3 CoS2
  7. Associate LMA profile, ip-phone-prof, to a mac-group, hpephone-grp
    switch(config)#aaa port-access local-mac apply profile ip-phone-prof mac-group hpphone-grp