Configuration without using mac-groups

  1. Create 3 LMA profiles
    
    aaa port-access local-mac profile “corp-pc-prof” vlan untagged 2
    
    (for corporate PCs)
    
    aaa port-access local-mac profile “rest-pc-prof” vlan untagged 3
    
    (for the rest of PCs)
    
    aaa port-access local-mac profile “corp-phone-prof” vlan tagged 5
    
    (for phones)
  2. Associate hosts directly to profiles
    
    aaa port-ac local-mac apply profile corp-pc-prof   mac-addr   002622bba7ac
    
    
    aaa port-ac local-mac apply profile rest-pc-prof   mac-mask 002622bb/32
    
    
    aaa port-ac local-mac apply profile rest-pc-prof  mac-mask  002622bc/32
    
    
    aaa port-ac local-mac apply profile corp-phone-prof   mac-oui  008011
    
  3. Enable LMA on ports
    
    aaa port-ac local-mac-auth <ports>