Port-Based Network Access Control Commands - D-Link DWS-4000 Series Cli Command Reference

D-Link Unified Switch CLI Command Reference
Term Definition
LeaveAll Timer This Leave All Time controls how frequently LeaveAll PDUs are generated. A LeaveAll PDU indicates
that all registrations will shortly be deregistered. Participants will need to rejoin in order to maintain
registration. There is an instance of this timer on a per-Port, per-GARP participant basis. The Leave
All Period Timer is set to a random value in the range of LeaveAllTime to 1.5*LeaveAllTime.
Permissible values are 200 to 6000 centiseconds (2 to 60 seconds). The factory default is 1000
centiseconds (10 seconds).
Port GMRP Mode The GMRP administrative mode for the port. It may be enabled or disabled. If this parameter is
disabled, Join Time, Leave Time and Leave All Time have no effect.
show mac-address-table gmrp
This command displays the GMRP entries in the Multicast Forwarding Database (MFDB) table.
Format
show mac-address-table gmrp
Mode Privileged EXEC
Term Definition
Mac Address A unicast MAC address for which the switch has forwarding and or filtering information. The format is
6 or 8 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB.
In an IVL system the MAC address is displayed as 8 bytes.
Type The type of the entry. Static entries are those that are configured by the end user. Dynamic entries are
added to the table as a result of a learning process or protocol.
Description The text description of this multicast table entry.
Interfaces The list of interfaces that are designated for forwarding (Fwd:) and filtering (Flt:).
P -B N
ORT ASED
This section describes the commands you use to configure port-based network access control (802.1x). Port-based network
access control allows you to permit access to network services only to and devices that are authorized and authenticated.
authentication login
This command creates an authentication login list. The <listname> is any character string and is not case sensitive. Up
to 10 authentication login lists can be configured on the switch. When a list is created, the authentication method "local" is
set as the first method.
When the optional parameters "Option1", "Option2" and/or "Option3" are used, an ordered list of methods are set in the
authentication login list. If the authentication login list does not exist, a new authentication login list is first created and then
the authentication methods are set in the authentication login list. The maximum number of authentication login methods is
three. The possible method values are local, radius and reject.
The value of local indicates that the user's locally stored ID and password are used for authentication. The value of
radius indicates that the user's ID and password will be authenticated using the RADIUS server. The value of reject
indicates the user is never authenticated.
© 2009 D-Link Corporation. All Rights Reserved
54
A
ETWORK CCESS
C C
ONTROL OMMANDS