Configuration without using mac-groups
- Create 3 LMA profiles
(for corporate PCs)aaa port-access local-mac profile “corp-pc-prof” vlan untagged 2
(for the rest of PCs)aaa port-access local-mac profile “rest-pc-prof” vlan untagged 3
(for phones)aaa port-access local-mac profile “corp-phone-prof” vlan tagged 5
- Associate hosts directly to profiles
aaa port-ac local-mac apply profile corp-pc-prof mac-addr 002622bba7ac
aaa port-ac local-mac apply profile rest-pc-prof mac-mask 002622bb/32
aaa port-ac local-mac apply profile rest-pc-prof mac-mask 002622bc/32
aaa port-ac local-mac apply profile corp-phone-prof mac-oui 008011
- Enable LMA on ports
aaa port-ac local-mac-auth <ports>