Authentication approaches

You can perform MAC authentication on the access device (local authentication) or through a RADIUS server.

Local authentication:

• MAC-based accounts—The access device uses the source MAC address of the packet as the username and password to search the local account database for a match.

• A shared account—The access device uses the shared account username and password to search the local account database for a match.

RADIUS authentication:

• MAC-based accounts—The access device sends the source MAC address of the packet as the username and password to the RADIUS server for authentication.

• A shared account—The access device sends the shared account username and password to the RADIUS server for authentication.

For more information about configuring local authentication and RADIUS authentication, see "Configuring AAA."