Config Mac_Based_Access_Control - D-Link DGS-3100 SERIES Cli Manual

config mac_based_access_control

Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To enable MAC Based Access Control on port or port list:
To enable/disable MAC based access control on a port(s).
config mac_based_access_control {ports [<portlist> | all] state
[enable | disable] }
The config mac_based_access_control command enables or
disables the functionality of MAC-based access control on a port(s).
When using command to enable functionality:
This command enables 802.1x on the port(s), as 802.1x functionality
is used to activate MAC authentication. This command also
configures RADIUS as the authenticating protocol for 802.1x. To
achieve this, the enable command runs the following 802.1x
commands:
- config 802.1x auth_parameter ports 1:2 enable_reauth enable
- config 802.1x auth_parameter ports 1:2 port_control auto
- config 802.1x auth_mode mac_base ports 1:2
- config 802.1x auth_protocol radius
Important note: In order to complete the activation of MAC
authentication, the related ports must be configured as members in
the guest VLAN.
When using this command to disable functionality on a port or ports,
this command returns the port(s) to the default settings. To achieve
this, the disable command removes the following commands
(configured by the enable command) from port:
- config 802.1x auth_parameter ports 1:2 enable_reauth enable
- config 802.1x auth_parameter ports 1:2 port_control auto
- config 802.1x auth_mode mac_base ports 1:2
<portlist> − A port or range of ports whose MAC authentication is
enabled/disabled on it.
<state> − This parameter defines whether the port or range of ports
will be enabled or disabled.
This command can only be entered if the global command 'enable
mac_based_access_control' was previously entered.
DGS3100# config mac_based_access_control ports 1:1-
5 state enable
DGS3100#
DGS-3100 Series Gigabit Stackable Managed Switch CLI Manual
116