Configuring a device profile for local MAC match

Procedure
  1. Create a MAC group with the mac-group command.
  2. Define rules for adding devices to a MAC group with the match (for MAC groups) command.
  3. Define rules for ignoring devices so that they are not added to a MAC group with the ignore (for MAC groups) command.
  4. Create a device profile with the port-access device-profile command.
  5. Associate a MAC group with a device profile with the associate mac-group command.
  6. Add a role to a device profile with the associate role command. Make sure that the role is already created. For information on how to create a role, see port access role information in the Security Guide.
  7. Enable a device profile with the enable command.