Configuration using mac-groups

Procedure
  1. Create 3 LMA profiles
  2. aaa port-access local-mac profile “corp-pc-prof” vlan untagged 2 (for corporate PCs)
  3. aaa port-access local-mac profile “rest-pc-prof” vlan untagged 3 (for the rest of PCs)
  4. aaa port-access local-mac profile “corp-phone-prof” vlan tagged 5 (for phones)
  5. Create 3 different mac-groups
  6. aaa port-ac local-mac mac-group “corp-pc-grp” mac-addr  002622bba7ac (for corporate PCs)
  7. aaa port-ac local-mac mac-group “rest-pc-grp” mac-mask  002622bb/32  002622bc/32 (for the rest of PCs)
  8. aaa port-ac local-mac mac-group “corp-phone-grp” mac-oui  008011 (for phones)
  9. Associate groups to profiles 
    
aaa port-ac local-mac apply profile corp-pc-prof mac-group  corp-pc-grp

    
aaa port-ac local-mac apply profile rest-pc-prof mac-group  rest-pc-grp

    
aaa port-ac local-mac apply profile corp-phone-prof mac-group  corp-phone-grp
  10. Enable LMA on ports 
    
aaa port-ac local-mac-auth <ports>