Configuration without using mac-groups

  1. Create 3 LMA profiles
    
aaa port-access local-mac profile “corp-pc-prof” vlan untagged 2
    (for corporate PCs)
    
aaa port-access local-mac profile “rest-pc-prof” vlan untagged 3
    (for the rest of PCs)
    
aaa port-access local-mac profile “corp-phone-prof” vlan tagged 5
    (for phones)
  2. Associate hosts directly to profiles
    
aaa port-ac local-mac apply profile corp-pc-prof   mac-addr   002622bba7ac

    
aaa port-ac local-mac apply profile rest-pc-prof   mac-mask 002622bb/32

    
aaa port-ac local-mac apply profile rest-pc-prof  mac-mask  002622bc/32

    
aaa port-ac local-mac apply profile corp-phone-prof   mac-oui  008011
  3. Enable LMA on ports
    
aaa port-ac local-mac-auth <ports>